中文
本版本完善了外部 Skill 的安装、校验和运行链路。
新增功能
- 支持在个人端和企业管理端上传或拖拽 ZIP,安装普通 Skill 与专家包。
- 支持在对话中请求安装 SkillHub Skill;由服务端受控下载,并复用统一的安装和校验流程。
- 安装结果可展示版本、文件清单、兼容性警告及专家包内的子 Skill。
- DSH 运行时可物化不可变 Skill 目录资源,并准确展示自动或手动调用状态。
安全与可靠性
- 对 ZIP 路径穿越、符号链接、加密条目、异常压缩比、文件数量和体积进行限制。
- 使用内容摘要校验运行时 Skill 包,支持重复安装识别和版本更新。
- 保持个人 Skill 与企业 Skill 的权限和启用范围隔离。
English
This release completes the installation, validation, and runtime path for external Skills.
New features
- Install standard Skills and expert packages by uploading or dropping ZIP files in the personal and organization interfaces.
- Ask MOVO in chat to install a SkillHub Skill; downloads are controlled by the server and use the same validation and persistence pipeline.
- View package versions, file manifests, compatibility warnings, and child Skills contained in expert packages.
- Materialize immutable Skill directory resources for the DSH runtime and display automatic or manual Skill invocation activity accurately.
Security and reliability
- Reject path traversal, symbolic links, encrypted entries, suspicious compression ratios, and packages exceeding file count or size limits.
- Verify runtime packages by content digest, detect duplicate installs, and support package updates.
- Preserve isolation between personal and organization Skill scopes.