🚀 skillshare v0.11.0 Release Notes

Release date: 2026-02-10

TL;DR

v0.11.0 focuses on three themes:

1. Security audit workflow (CLI + Web UI)
2. Safer uninstall with trash + recovery
3. Better dual-mode (global/project) log usability

New Features

• Security audit command: skillshare audit [name]
  • Detects prompt injection, data exfiltration, credential access, destructive commands, obfuscation, and suspicious URLs.
  • CRITICAL findings block install by default (--force to override).
  • Supports project mode: skillshare audit -p.
• Web UI Audit page
  • Run audits from dashboard and review findings with severity labels.
  • Install flow supports CRITICAL-force confirmation and warning dialogs.
• Audit API endpoints
  • GET /api/audit
  • GET /api/audit/{name}
• Trash (soft-delete) workflow
  • Uninstall now moves skills to trash (7-day retention).
  • New commands: trash list, trash restore <name>, trash delete <name>, trash empty.
• Update preview command
  • skillshare check shows available updates without modifying files.
• Search upgrades
  • Better ranking/scoring, repo-scoped query support (owner/repo[/subdir]).
• Install source support
  • SSH subpath install with git@host:repo.git//subdir.

Important Changes

• Project mode clarity improvements
  • Output labels explicitly show (project) where relevant.
• CLI log output redesign (TTY)
  • Two-line table format for readability.
  • Header now includes mode (global / project) and actual log file path.
• Project log safety defaults (project mode only)
  • .skillshare/logs/ is ignored by default in project mode.
  • Backward-compatibility guard: first-time log directory creation also checks/updates .skillshare/.gitignore.
• Install UX improvements
  • Hidden folder scan now skips only .git.
  • install --skill falls back to fuzzy match when exact match fails.

Fixes

• Web UI uninstall now follows trash semantics (no accidental permanent delete path).
• Windows self-upgrade now shows clearer locked-binary hints.
• Build task path handling (ui:build) fixed to avoid leaking cd ui context.

Upgrade Notes

• No breaking command rename in this release.
• Recommended post-upgrade checks:
  • skillshare check
  • skillshare audit
  • skillshare log (auto mode) or explicit skillshare log -g / skillshare log -p

Log Modes (Global + Project)

• Global mode log files:
  • ~/.config/skillshare/logs/operations.log
  • ~/.config/skillshare/logs/audit.log
• Project mode log files:
  • <project>/.skillshare/logs/operations.log
  • <project>/.skillshare/logs/audit.log

Project Teams: If You Intentionally Want Logs in Git

Project mode ignores .skillshare/logs/ by default.
If your team wants to version logs, add override rules in .skillshare/.gitignore after the managed block:

# User override: track logs
!logs/
!logs/*.log

Changelog

• f7dafdd chore(docs): modify docs link
• f152245 docs(skill): update built-in skill to v0.11.0 with audit, trash, log, and drift detection
• ecabe20 feat(docs): add search feature
• 8ec5306 feat(install): fix hidden-dir discovery, add fuzzy search, and improve install UX
• caf119d feat(install): support subpath in SSH URLs with // separator
• d2e0065 feat(search): add relevance scoring, parallel enrichment, and repo-scoped search
• 8604ab2 feat(ui): add Trash page, trash API handlers, and CLI delete/empty commands
• 380907b feat(website): redesign with hand-drawn aesthetic and update README logo
• 5a65993 feat: add operation log — JSONL-based persistent audit trail for CLI, API, and web UI
• e5813cc feat: add oplog instrumentation to all API handlers, improve audit/log/sync CLI
• 0c49860 feat: add project mode labels, privacy-first messaging, and UI polish
• 4d17ff5 feat: add security audit — scan engine, CLI, install hooks, web UI, and docs
• d429030 feat: add sync drift detection to status, doctor, and web UI
• 46c1f8e feat: add tracked field to ProjectSkill config, fix reconcile for tracked repos
• 3a92061 feat: add trash (soft-delete) for uninstall with 7-day retention
• 570195d feat: enhance skill template, improve search UX, and harden playground
• f2017a3 feat: fix tracked repo discovery, improve naming, and unify project list
• 4d620f2 feat: improve log view and project log ignore defaults
• 14bb54d fix(log): show target count in sync log details
• 86b5650 fix: correct ui:build path in mise.toml
• 3e8aec7 fix: show helpful message when Windows upgrade fails due to locked binary