Skip to content

fix(skills): keep every path reference inside the bundle - #55

Merged
modusensus merged 1 commit into
mainfrom
fix/skill-bundle-references
Nov 11, 2026
Merged

modusensus merged 1 commit into
mainfrom
fix/skill-bundle-references

Conversation

@modusensus

Copy link
Copy Markdown
Member

ClawHub's security scan resolves code-quoted paths in SKILL.md against the skill bundle. Three pointers per edition name repository files the bundle does not ship (fact-contract, stop-gate, positioning), and both 0.11.0 listings have read security.status_not_clean since 2026-11-09 because of them — a durable verdict, not the card.missing settle intermediate.

  • fact-contract now points at references/fact-contract.md, which the bundle carries (the following line already cited it).
  • stop-gate and positioning are named in prose instead of a code-quoted path that is a broken pointer from the bundle's perspective.

Tests: skill + skill-mirror + i18n, 29 pass. This unblocks 0.11.1's ClawHub listings.

ClawHub's security scan resolves code-quoted paths in SKILL.md against the
skill bundle; the three docs/*.md pointers (fact-contract, stop-gate,
positioning, both editions) name repository files the bundle does not ship,
and the 0.11.0 listings have sat at security.status_not_clean for two days
because of them. Repoint fact-contract to references/fact-contract.md, which
the bundle carries, and name the other two documents in prose instead of a
broken-looking path.
@coderabbitai

coderabbitai Bot commented Nov 11, 2026 •

Copy link
Copy Markdown

Explain Change →

Caution

Review failed

The pull request is closed.

  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

@modusensus
modusensus merged commit 46c3b9b into main Nov 11, 2026
10 checks passed
@modusensus modusensus mentioned this pull request Nov 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant