Serve skill:// resources from a reviewed static bundle

[aterga]

Summary

The served skill:// resources are now compiled into the binary from a reviewed, versioned bundle instead of being fetched live from skills.internetcomputer.org at request time. Directory review treats dynamically retrieved behavioral instructions as a rejection trigger; a static bundle means what an agent reads is exactly what was reviewed at release, and the served binary no longer retrieves any instructions over the network.

Related issues

None — follow-up in the directory-submission series (after #158/#161).

Changes

• crates/imcp2-core/static/skills/ — 23 official IC skills (SKILL.md each) bundled 2026-08-28 from the public skills registry, plus 18 companion documents under references/<skill>/<file>, served as skill://<skill>/references/<file>. The bundle README documents provenance, the curation (what was excluded and why), the local edits applied to the mirrored text, and the refresh procedure.
• skills.rs — BUNDLED_SKILLS and BUNDLED_SKILL_REFERENCES tables (include_str!), with bundled_skill_document() resolving a skill:// path for both list_resources and read_resource, so the served set cannot drift from the advertised set. Two tests: the bundle is well-formed, and it is closed under its own references — no document points at the registry, every skill:// link resolves, no companion is named by a bare relative path, and every listed URI is readable.
• tools.rs — IcTools (the served composition) drops its SkillsCatalog; resources come from the bundle. The live SkillsCatalog remains library code for the unserved IcProtocolTools, so an embedder who wants live skills still has the machinery.
• src/lib.rs, crates/imcp2-local/ — neither binary constructs the live catalogue any more, so neither reads SKILLS_URL nor contacts skills.internetcomputer.org.
• Docs follow the binary: README skills section describes the bundle and its companions; the privacy policy (draft + served page) drops the skills host from the disclosed recipients and bumps the effective date to August 28, 2026; the Anthropic submission doc's third-party list and prompt-injection acknowledgment now state that no instructions are retrieved over the network.

Local edits to the mirrored text

The files are verbatim apart from three mechanical edits, recorded in the bundle README and re-applied on refresh: companion references rewritten to their skill:// URIs; three lines of caffeine-app that told the agent to load another skill's SKILL.md over HTTP pointed at skill://writing-motoko; and handoffs to skills this bundle does not carry (wallet-integration, canhelp) neutralized. Content itself is not edited — corrections belong upstream in the registry, and four defects found during review were forwarded there.

Testing

• cargo build --locked --all-targets
• cargo test --locked --all-targets — green except discover::tests::search_finds_ckusdc_and_lookup_identifies_it, a live-network test failing because the IC dashboard API is down (see the comment below); unrelated to this diff and failing identically on other branches
• cargo clippy --all-targets — unchanged 10-warning baseline (this repo is not rustfmt-clean; no repo-wide cargo fmt, matching prior PRs)
• npm test --prefix monitoring/mcp-status (dashboard unchanged)

Checklist

• I have read the Contributing guidelines.
• Docs (README / comments) updated for any user-visible change.
• No secrets, credentials, or internal-only information are included.

[Copilot]

Pull request overview

Moves served skill:// resources from live registry fetches to a reviewed bundle compiled into both binaries.

Changes:

• Adds 24 bundled IC skill documents.
• Serves bundled resources without runtime registry access.
• Updates constructors, privacy disclosures, and submission documentation.

Reviewed changes

Copilot reviewed 34 out of 34 changed files in this pull request and generated 9 comments.

Show a summary per file

File	Description
README.md	Documents static skill delivery.
src/lib.rs	Removes hosted live-catalog construction.
src/assets/privacy-policy.html	Updates effective date and recipients.
docs/icp-mcp-privacy-policy-draft.md	Updates draft privacy disclosures.
docs/anthropic-directory-submission.md	Updates directory attestations.
crates/imcp2-local/src/main.rs	Removes local live-catalog construction.
crates/imcp2-local/src/server.rs	Updates local test construction.
crates/imcp2-core/src/tools.rs	Serves bundled skill resources.
crates/imcp2-core/src/skills.rs	Defines bundle lookup and validation.
crates/imcp2-core/static/skills/README.md	Records bundle provenance and curation.
static/skills/agent-web-identity.md	Bundles web identity guidance.
static/skills/caffeine-app.md	Bundles Caffeine app guidance.
static/skills/canhelp.md	Bundles canister help guidance.
static/skills/canister-security.md	Bundles security guidance.
static/skills/certified-variables.md	Bundles certification guidance.
static/skills/cloud-engine-canisters.md	Bundles cloud-engine guidance.
static/skills/custom-domains.md	Bundles custom-domain guidance.
static/skills/cycles-management.md	Bundles cycles guidance.
static/skills/deploy-to-cloud-engine.md	Bundles cloud deployment guidance.
static/skills/encrypted-maps.md	Bundles encrypted storage guidance.
static/skills/evm-rpc.md	Bundles EVM RPC guidance.
static/skills/https-outcalls.md	Bundles HTTPS outcall guidance.
static/skills/ic-dashboard.md	Bundles dashboard API guidance.
static/skills/icp-cli.md	Bundles CLI guidance.
static/skills/internet-identity.md	Bundles authentication guidance.
static/skills/migrating-motoko-actors.md	Bundles migration guidance.
static/skills/mops-cli.md	Bundles Mops guidance.
static/skills/multi-canister.md	Bundles multi-canister guidance.
static/skills/service-discoverability.md	Bundles discoverability guidance.
static/skills/stable-memory.md	Bundles stable-memory guidance.
static/skills/static-site.md	Bundles static-site guidance.
static/skills/troubleshooting-motoko-migrations.md	Bundles migration troubleshooting.
static/skills/vetkeys.md	Bundles vetKeys guidance.
static/skills/writing-motoko.md	Bundles Motoko guidance.

Suppressed comments (3)

crates/imcp2-core/static/skills/caffeine-app.md:434

• This second live-registry instruction reintroduces dynamic behavioral content despite the PR's static-review guarantee. Direct the client to the bundled skill://writing-motoko resource.

8. **Writing Motoko without the `writing-motoko` skill.** Modern Caffeine Motoko uses
   `mo:core`, persistent actors, and specific patterns. Guessing produces compiler
   errors. Load <https://skills.internetcomputer.org/skills/writing-motoko/SKILL.md> first.

crates/imcp2-core/static/skills/caffeine-app.md:455

• This third live URL again tells the agent to bypass the reviewed bundle. Keep the required companion reference entirely within skill://.

- **`writing-motoko`** — REQUIRED companion. Authoritative for all backend Motoko code:
  <https://skills.internetcomputer.org/skills/writing-motoko/SKILL.md>. Always load it before
  editing `src/backend/main.mo`.

crates/imcp2-core/static/skills/stable-memory.md:340

• The summary repeats the incorrect claim that Bound::Unbounded prevents schema-compatibility breakage. It prevents size-bound failures, but existing CBOR still fails to deserialize after adding a required field without a default or migration.

- Implement `Storable` for custom types: define `BOUND`, `to_bytes`, `into_bytes`, and `from_bytes`. Use `ciborium::into_writer`/`ciborium::from_reader` for CBOR serialization (compact, fast). Prefer `Bound::Unbounded` -- it avoids backwards compatibility breakage when adding new fields. `Bound::Bounded` exists but is not recommended because exceeding `max_size` after a schema change breaks deserialization

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Copilot]

Pull request overview

Copilot reviewed 44 out of 44 changed files in this pull request and generated 4 comments.

[aterga]

CI is red on 8cdbf30, and it is not this PR's failure. Recording it here rather than leaving it unexplained.

The failing check is CI / test, on one test:

discover::tests::search_finds_ckusdc_and_lookup_identifies_it
lookup: "dashboard request failed: error sending request for url
(https://ic-api.internetcomputer.org/api/v3/canisters/xevnm-gaaaa-aaaar-qafnq-cai)"

That is a live-network test against the IC dashboard API, which is down: a direct request to the same URL returns HTTP 524 and then times out outright on three consecutive attempts from here. The token-ledgers endpoint the search half uses is equally unreachable. This PR touches the skills bundle and the resource handlers, not discover's network path, and the same test failed on the same commit-minute in #167, whose diff is unrelated to both. CI passed on this branch's previous head (5557429, 10:31Z) and on #167's (30850a0, 10:56Z); the failures start after 11:08Z.

There is no fix to port — the service is the fix — and I am not touching the test: making a live-network assertion pass while the network is down would mean weakening it, which is not something to do for an outage, and certainly not in this PR. The re-run is held until the dashboard answers again; a check-in is scheduled to do that and report back here only if the result is anything other than green.

---

Generated by Claude Code

[Copilot]

Pull request overview

Copilot reviewed 51 out of 51 changed files in this pull request and generated 2 comments.

Suppressed comments (1)

crates/imcp2-core/src/skills.rs:36

• The current PR description says this table bundles 24 official skills, but it contains 23 entries (with canhelp deliberately excluded). Update the PR description to 23 skills plus 18 companion documents so the reviewed release inventory is accurate.

pub const BUNDLED_SKILLS: &[(&str, &str, &str)] = &[

[Copilot]

Pull request overview

Copilot reviewed 51 out of 51 changed files in this pull request and generated 1 comment.

[Copilot]

Pull request overview

Copilot reviewed 51 out of 51 changed files in this pull request and generated no new comments.

Suppressed comments (1)

crates/imcp2-core/src/skills.rs:455

• The closure check still misses bare references to a companion's parent SKILL.md, even though that filename is not a readable MCP URI. Current examples include references/icp-cli/canister-env-vars.md:3, binding-generation.md:91, references/vetkeys/ibe.md:158, and both static-site companions. Rewrite these to their parent skill://<name> URI and extend this check to reject bare SKILL.md mentions; otherwise the documented guarantee that internal references resolve to served resources is not true.

            // The same holds for a markdown link straight at a sibling file,
            // which carries no `references/` segment to catch it by: inside a
            // companion, `](migrating-from-asset-canister.md)` addresses a
            // document the client cannot open either. Every markdown target
            // ending in `.md` must be an absolute URI.