0.13.1 — Cursor plugin skills follow the manifest

0.13.1 — Cursor plugin skills follow the manifest

0.13.0 opened collect_policy_evidence to Cursor. A Cursor plugin that declares
a skills field still got the wrong skill inventory and a false inventory gap.
A gap makes collect_policy_evidence raise PolicyEvaluationError by default.
This release makes the inventory match what Cursor loads.

Highlights

• A Cursor plugin's skills field replaces folder discovery. The
  scanner reads the field the way the Cursor CLI 2026.10.22-27dcf5f does.
  • "skills": "./custom-skills" loads that directory only. The scanner no
    longer also scans skills/.
  • "skills": [] loads no skills. It no longer records an inventory gap.
  • In a list, an entry that names no directory is skipped. The other entries
    still load, and no inventory gap is recorded.
  • Devin keeps its own rule. One invalid entry stops all skill loading, and
    the scanner records a gap.

Install

uv tool install openaca==0.13.1 or pip install openaca==0.13.1.

Compatibility

Pre-V0 — no back-compatibility hedging.

• Cursor BOMs can lose skill components. A Cursor plugin that declares a
  skills field no longer lists the skills in its skills/ folder.
• Cursor policy evidence fails less often. The three manifest shapes above
  no longer raise PolicyEvaluationError for an inventory gap.
• Claude Code, Codex and Devin are unchanged.
• openaca:schema_version stays 0.6. The BOM document shape did not
  change.
• The overlay record schema is unchanged.