Package Exports

This package does not declare an exports field, so the exports above have been automatically detected and optimized by JSPM instead. If any package subpath is missing, it is recommended to post an issue to the original package (skilllock) to support the "exports" field. If that is not possible, create a JSPM override to customize the exports field for this package.

Readme

skilllock

Reproducible lockfiles, verification, diff, security audit, and contract tests for Agent Skills.

APM、Vercel skills、skillpm 解决 怎么装；skilllock 解决 装完之后怎么锁、怎么验、怎么 diff、怎么审计、怎么测、怎么复现、怎么升级。

v1.1.0 — 已开源：github.com/lz1834career/skilllock · CI 已通过 · npm 待发布（见 RELEASING.md）。

文档

文档	内容
docs/getting-started.md	安装与五分钟工作流
docs/commands.md	完整命令参考
docs/ecosystem.md	与 APM / skills / skillpm / sklock 的分工
examples/demo-project	可运行示例
action/README.md	GitHub Action 用法
RELEASING.md	npm / Action 发布 checklist
CHANGELOG.md	版本历史

Install

npm install -D skilllock
npx skilllock init
npx skilllock lock
npx skilllock check

未发布 npm 前，在 skilllock 仓库根目录：

npm run build
npm install -g .
# 或
node dist/cli.js check --project examples/demo-project

Quick workflow

skilllock init
skilllock import          # optional: merge apm.yml / package.json sources
skilllock lock --snapshot # optional: offline snapshots
skilllock check           # CI gate
skilllock reproduce       # fresh clone / new machine
skilllock graph           # Mermaid 依赖图（v1.1+）

GitHub Action

- uses: lz1834career/skilllock/action@v1.0.1
  with:
    command: check

与 sklock 怎么选？

你更需要	选
CI 门禁、reproduce、audit、MCP/Rules lock、升级	skilllock
嵌套 `skills//skills/` 目录 + closureHash	sklock
两者可组合：安装器装 skill → skilllock lock/check	见 docs/ecosystem.md

skilllock 采用 平铺目录（.cursor/skills/<name>/）+ frontmatter metadata.skilllock.dependencies 声明依赖，不做 filesystem 嵌套发现。

Lockfile v2（摘要）

lockfileVersion: 2
skills:
  - name: demo-skill
    source: { type: apm, ref: org/repo/skills/demo-skill }
    dependencies: [helper-skill]
    files: [{ path: SKILL.md, hash: sha256:..., size: 123 }]
context:
  - kind: mcp
    name: mcp.json
    files: [...]

License

MIT — see LICENSE.