V3.1.0 - ExChek Enterprise Plugin

Bug fix release. v3.0.0 shipped the local-first exchek-mcp server but the SKILL.md bodies still told Claude to curl api.exchek.us and spawn the docx script directly. Trial users confirmed the engine was still hitting our remote API — the MCP was running but unused.

Fixed

• All 16 SKILL.md files now carry a ⚡ Tools (v3.1.0+) prefix block immediately after their frontmatter, listing the mcp__exchek__* tools and instructing Claude to use them instead of constructing HTTP requests or spawning shell commands.
• The body narratives are unchanged — they still document the underlying behavior, but the prefix overrides them as the canonical implementation path.

Effect on users

• Outbound network from any skill is now www.ecfr.gov (regulation text, cached 24h) and data.trade.gov (CSL screening, live) only. No more api.exchek.us traffic.
• Input sanitization, CUI-gate recording, HMAC-chained audit logging, and disclosure validation now run on every flow — these tools were exposed in v3.0.0 but never invoked.

Upgrade

/plugin marketplace update
/plugin update exchekskills

Or zip-upload users: download v3.1.0 source from this release.