addyosmani/agent-skills 0.6.16

Agent Skills 0.6.16

on GitHub

Agent Skills 0.6.16 lets specs evolve past V1, teaches the docs skill to spot drift, stops the frontend skill from installing toolchains just to verify, and fixes two quality-gate examples that could never fail.

Skills

• Spec evolution (#383, @ayobamiseun). Specs now carry a version and an Out of Scope (Deferred) list, and a change to a shipped feature gets its own small delta spec (SPEC-<change>.md) instead of a rewrite. /spec writes one when SPEC.md already exists, and /build auto picks the delta that isn't Status: implemented and refuses to run a plan generated from a different spec.
• Documentation drift (#514, @vyasdx). When a doc may be stale, documentation-and-adrs compares the last commit to the code with the last commit to the doc, and says "can't tell" instead of "current" when the history is unordered. Change logs are appended to, never rewritten.
• Verify with what the project has (#732, @TwelveNights). frontend-ui-engineering no longer installs a test runner or type checker just to check its work, and follows the WAI-ARIA APG patterns for menus, dialogs, tabs, listboxes and comboboxes. Measured +0.10 across 11 models, with package installs down from 24% to 4% of runs.
• Review findings checked against the code (#736, @CybotTM). code-review-and-quality checks each finding against the callers, guards and tests that reach the change, labels defects already in the base separately, and treats zero findings as a valid result.
• Gates that can fail (#786, @rudycelekli). depcruise --validate src printed usage and exited 0; the constraints skill now runs depcruise src.
• Session secret (#787, @rudycelekli). The hardening example fails at startup when SESSION_SECRET is missing instead of returning 500 on every request.
• OWASP Top 10:2025 (#785, @usaid7015). The checklist and security skill use the 2025 numbering, cited with the year.
• Skills fire on pasted code (#762, #763, #757, @ayobamiseun, part of #620). test-driven-development, code-review-and-quality and debugging-and-error-recovery now fire when the code is pasted inline and the answer looks obvious, each with a stays-quiet case guarding its neighbours.

Evals and tooling

• Behavioral runs stage the skill directory and shared references/ outside the fixture baseline, so a skill can read its checklists (#744, @CybotTM, fixes #584).
• The reference-link validator keeps markup inside code spans in heading slugs (#782, @kevin9327).
• The hook suites also run on macOS's stock bash 3.2, and the staged-secret-scan test runs cross-platform (#778, @ayobamiseun).

Thanks

Thanks to everyone who contributed and reviewed this release: @ayobamiseun, @vyasdx, @TwelveNights, @CybotTM, @rudycelekli, @usaid7015, @kevin9327, @abhisheksharma2411 and @federicobartoli.

Full Changelog: 0.6.15...0.6.16