Release v0.20.0 · stbenjam/skillsaw

What's New

More supported tools: OpenCode configuration, agents, commands, and skills; Devin rules and skills; GitHub Copilot custom agents; and Muse Code hooks and shared agent memory.
Grok Build support: Validate project configuration, agents, hooks, plugins, and marketplaces.
Google Antigravity support: Discover customization roots and validate configuration, plugins, hooks, MCP servers, and registries.
Expanded Codex validation: Check hooks and MCP servers in .codex/config.toml, with improved compatibility for plugin interface assets.
Package metadata checks: Validate MCP Registry server.json files and Vercel skills-lock.json files, including package ownership and source metadata.
New instruction checks: Detect missing AGENTS.md imports in CLAUDE.md and optionally flag fully qualified MCP tool names in prose.
Better troubleshooting: Generate local diagnostic bundles with skillsaw feedback, view skillsaw explain through an interactive pager, and see which rules account for large finding counts.
Smoother upgrades: New skillsaw-update and skillsaw-release-ready skills, plus onboarding guidance for reviewing findings before fixing or baselining them.

Reduce false positives for documented secret examples, migration mappings, routing descriptions, and internal references.
Consolidate unreferenced directories into fewer findings and recognize files loaded collectively by scripts.
Align autofix eligibility with severity settings, report failed writes accurately, and explain skipped symbolic links.
Fix case-only command renames on case-insensitive filesystems.
Preserve externally installed content during autofix and improve ownership detection in linked worktrees and nested local skill sources.
Improve host-specific parsing, hook security checks, directory exclusions, and handling of unreadable discovery paths.
Honor explicitly requested package versions in the GitHub Action.
Reduce repeated discovery work and Markdown memory use on large repositories.

Keep version: "0.19.0" in .skillsaw.yaml to defer new automatically enabled rules; set it to "0.20.0" when ready.
hooks-json-valid is now an alias for claude-hooks-valid only. Configure other hosts' hook rules separately; muse-hooks-valid requires explicit opt-in.
skillsaw fix now follows the reported severity scope. Suggested rewrites still require --suggest.
Repeated-directive findings now default to INFO, and the function/method terminology group is opt-in.
Baselines automatically include INFO findings when configuration sets fail-on: info.
skillsaw add and skillsaw docs are deprecated but remain available.

See the upgrade guide for details.

Full changelog: v0.19.0...v0.20.0