Skip to content

SkillRadar v0.4.0 — Wider discovery, Matching v2, Skill Budget Doctor

Choose a tag to compare

@github-actions github-actions released this 25 Aug 22:31

SkillRadar v0.4.0 — Wider discovery, Matching v2, Skill Budget Doctor

v0.4.0 moves SkillRadar from a design-heavy registry/router into a broader Agent Skills intelligence layer while keeping the v0.3 safety boundary: discovery is not execution.

Highlights

General Agent Skills Radar

The daily pipeline now maintains a second discovery lane across 10 general domains:

AI Agents · Frontend · Backend & API · Data & Database · Testing & Quality · DevOps & Cloud · Security · Mobile · Automation & Integrations · Docs & Research.

Discovery combines repository search, SKILL.md code search, and ecosystem-wide Agent/Claude/Codex skill queries. Each candidate records discovery channels, coverage metrics, maintenance, popularity, quality, security findings, and domain classifications. Temporary search misses can be retained for 14 days instead of immediately disappearing.

Bundled registry schema v2

The Codex plugin snapshot now bundles three safety-gated shards:

core + design + general

D and Blocked discovered skills are rejected before packaging. Cross-source duplicate entries are collapsed before the snapshot hash is generated. The router remains backward-compatible with schema v1 snapshots.

Matching v2

The router no longer relies on raw substring hit counts. Matching v2:

  • recognizes task phrases/concepts such as App Router, tool calling and design systems;
  • avoids short-token substring errors such as ai accidentally matching tailwind;
  • weights evidence differently across identity, tags, domain, summary and source fields;
  • measures task-signal coverage;
  • combines relevance with SkillRadar quality, security and freshness priors;
  • diversity-reranks the Top 3 to reduce redundant recommendations;
  • returns match_details and ranking.version: 2.0 for auditability.

The C-grade safer-alternative advisory remains in force.

Skill Budget Doctor

$manage-skills is now backed by a real read-only diagnostic command:

node ../../scripts/skill-budget.mjs audit '<project or task focus>'

It inventories visible user/project/plugin skills, estimates metadata pressure using current Codex budget behavior, detects near duplicates, uses project/task relevance as a pruning signal, and generates projected savings plus [[skills.config]] enabled = false snippets.

The doctor does not edit ~/.codex/config.toml, disable a skill, remove a plugin, install a skill, or execute a third-party script unless the user separately and explicitly authorizes a later change.

Verification added

CI now verifies:

  • schema-v2 core/design/general bundle integrity and safety gates;
  • Ranking v2 evidence in plugin-only offline routing;
  • schema-v1 backward compatibility;
  • C-grade safety advisory behavior;
  • Skill Budget Doctor overflow detection, duplicate detection and projected savings;
  • public Codex marketplace installation after release.

Upgrade

codex plugin remove skillradar@skillradar
codex plugin marketplace remove skillradar
codex plugin marketplace add changchangidea-oss/SkillRadar --ref v0.4.0
codex plugin add skillradar@skillradar

Start a fresh Codex thread after upgrading.