v3.0.7 — Skills-First Architecture
What's New
Skills-First Architecture
All pipeline agents are now first-class skills under skills/:
skills/hunter/— deep behavioral code analysisskills/skeptic/— adversarial false positive eliminationskills/referee/— independent verdicts with CVSS + PoCskills/fixer/— surgical code repair respecting fix strategyskills/recon/— codebase reconnaissance and risk mappingskills/doc-lookup/— unified docs (Context Hub + Context7)
Plus 4 security skills: commit-security-scan, security-review, threat-model-generation, vulnerability-validation
Publish Safety
prepublish-guardblocksnpm publishwhen git is dirty or unpushed- Prevents the "published to npm but forgot to push" problem
CI Fixes
- Portable shell detection (
SHELLenv var instead of hardcoded/bin/zsh) - Explicit
-b mainfor git init in tests - All 60 tests passing on Node 18 + 20
Full Changelog
See CHANGELOG.md