Fixed
- (GH-40) The folder-shaped
{name}/SKILL.mdfallback (GH-27 phase 4) now applies to every skill-resolution tier, not just shared sources: a project's own.dmx/skills/and dmx's bundledskills/directory both get the same flat-then-folder-shaped lookup. - (GH-40 review)
get_skill_definition's skill name is now validated as a plain slug before any filesystem lookup, closing a path-traversal gap that let a../-laden or absolute name resolve to arbitrary files outside the intended skills directories.
See CHANGELOG.md for full details.