v2.2.0 — skill auto-loading, hooks, read-only research agents

Backfilled release for the v2.2.0 tag.

v2.2.0 — skill auto-loading, hooks, read-only research

Added

• All plugins: homepage and repository fields in plugin.json.
• codebase-health: skills field on agents for automatic skill loading — deep-audit and dead-code-cleanup load code-auditing; update-docs loads docs-maintenance.
• second-opinion: skills field on agents — codex-consultant and gemini-consultant load ai-consultation.
• research-assistant: disallowedTools: Write, Edit on agents for read-only safety.
• codebase-health: prompt-based Stop hook for audit-report verification.
• second-opinion: prompt-based PreToolUse hook for Bash sandbox safety.

Changed

• research-assistant: Removed the bundled MCP servers (Context7, Fetch) — users commonly install these separately. The plugin now falls back to WebSearch/WebFetch when MCP is unavailable, with installation nudges when the tools are missing.

Removed

• research-assistant: .mcp.json (Context7 and Fetch no longer bundled).

Note: the plugin-level Stop hook added here silently never loaded, due to a manifest nesting bug fixed in v3.1.2 — and once loaded it fired on every turn, fixed in v3.1.3 by scoping it to /deep-audit's frontmatter.

Full diff: v2.1.0...v2.2.0