v0.2.0 — pre-commit hook + pipx install

Added

• pre-commit hook: repos: [repo: https://github.com/ruslanlap/skill-vet, hooks: [id: skill-vet]] — scans staged text files on every commit.
• Installable: pipx install git+https://github.com/ruslanlap/skill-vet → skillvet command (single stdlib-only module, zero deps).
• Multi-target CLI: skillvet dir1/ dir2/ file.md — findings merged; .skillvet.yml allowlist is now discovered up the directory tree (nearest wins), so monorepos can have per-skill policies.
• 21 tests green; CI + release verified.

v0.1.1 — GitHub annotations, 18 rules, full test suite

Added

• --format github: emits ::error workflow annotations — findings show inline on PR files (auto-enabled under GITHUB_ACTIONS).
• 3 new rules: CLIPBOARD-EXFIL (pbpaste/xclip piped to network), PERSIST-HOOK (appends to .bashrc/.zshrc/cron, both redirect orders), OSA-AUTOMATION (osascript -e, warn).
• CRED-HARVEST now covers .env and .git-credentials; EXFIL-ENV covers $(env) command substitution.
• Full test suite: 20 stdlib-unittest tests — every rule verified to fire on a trigger line and stay silent on benign lines; exit codes, SARIF structure, GitHub annotations, repo examples.

v0.1.0 — initial release

First public release.

• 15 detection rules: prompt injection, env/key exfiltration, credential harvesting, reverse shells, destructive commands, hidden-comment and BiDi stego instructions
• False-positive calibration: placeholder/test-credential allowlist by default, project overrides via .skillvet.yml
• CI-ready: exit codes, --fail-on severity gate, SARIF 2.1.0 for code scanning
• Composite GitHub Action included
• Zero dependencies, single stdlib-only Python file