v0.6.1 - Security audit refresh

Highlights

• Clarified the public runtime boundary: bundled retrieval and runner-adaptation
  scripts accept data-only formats, use release-fixed imports, and neither
  launch the optional upstream runner nor contact the network.
• Replaced three type-narrowing assertions in the runner adapter with explicit
  fail-closed errors, preserving required-input invariants under optimized
  Python without changing command-line interfaces, schemas, lifecycle
  transitions, or artifact behavior.
• Refreshed the published bundle content so registries and external security
  providers can index a distinct v0.6.1 snapshot.

Release verification

• 87 unit tests passed; the 6-test runner-adapter suite also passed under
  optimized Python.
• 120/120 isolated offline contract-canary runs passed across 12 cases with
  zero illegal transitions.
• Skill validation, pinned skills CLI discovery/rendering, public repository
  discovery, Bandit with zero findings, dangerous dynamic-loader pattern
  scanning, and git diff --check passed.

Security context

• The removed v0.5.0 embedding-provider and sibling-module loaders remain
  absent from every published script.
• The public safety contract now states the executable boundary directly rather
  than relying on readers to infer it from the individual backend and adapter
  descriptions.
• skills.sh audit results are generated externally and may remain unchanged
  until the new bundle is indexed and partner audits are rerun. The stale-audit
  report is tracked in
  vercel-labs/skills#1673.

Install or update

npx skills add lizhouai/storm-research-skill

For an existing project-local installation:

npx skills update storm