🚀 skillshare v0.14.0 Release Notes

Release date: 2026-02-18

TL;DR

v0.14.0 focuses on install control and batch operations:

1. .skillignore — repo authors can hide skills from discovery; supports group matching by directory path
2. --exclude flag — installers can skip specific skills at the CLI; license metadata is now visible during selection
3. Multi-skill & group uninstall — batch remove skills by name or --group prefix in a single command
4. group field in manifest — explicit placement field replaces the old slash-in-name hack; auto-migrated
5. Global skill manifest — config.yaml now supports a skills: section in global mode, matching project mode
6. 6 new audit rules — detects dynamic code evaluation, shell invocation, env leaking, prompt injection, and escape obfuscation

What's New

1) .skillignore — repo-level skill filtering

Repo authors can now add a .skillignore file to the repository root to hide skills from discovery during skillshare install:

# Hide experimental skills
experimental-*

# Hide entire group directory
feature-radar

Pattern types:

• Exact match — my-skill hides only that skill
• Trailing wildcard — prefix-* hides all skills starting with prefix-
• Group match — feature-radar hides all skills under the feature-radar/ directory (path-based comparison)

Backward compatible — flat skills have path == name, so existing patterns work unchanged.

2) --exclude flag and license display

# Skip specific skills during install
skillshare install owner/repo --exclude debug-helper --exclude experimental

# License is now shown in selection prompts
# ┌─────────────────────────────────────┐
# │ my-skill (MIT)                      │
# │ Description here                    │
# └─────────────────────────────────────┘

The --exclude flag filters before the interactive prompt, so excluded skills never appear in the selection list.

3) Multi-skill and group uninstall

# Remove multiple skills at once
skillshare uninstall skill-a skill-b skill-c

# Remove all skills under a group prefix
skillshare uninstall --group frontend --group experimental

# Mix names and groups
skillshare uninstall old-skill --group deprecated

• --group/-G uses prefix matching — --group frontend removes frontend/* recursively
• Problematic skills are skipped with warnings (skip & continue)
• Duplicates are deduplicated by path
• Single-skill invocation preserves backward-compatible output
• Group auto-detection — when uninstalling a directory that contains sub-skills, the confirmation prompt shows Uninstalling group (N skills) with a list of contained skills

4) group field in skill manifest

The --into flag information was previously encoded in the name field (e.g. name: frontend/pdf), which failed validation because validate.SkillName() rejects slashes. The new group field separates placement from identity:

# Before (legacy — auto-migrated)
skills:
  - name: frontend/pdf
    repo: owner/repo

# After
skills:
  - name: pdf
    group: frontend
    repo: owner/repo

• FullName() returns frontend/pdf, EffectiveParts() returns (pdf, frontend)
• Both global and project reconcilers write the new format and auto-migrate legacy entries
• install, uninstall, and config cleanup all use the new helpers

5) Global skill manifest

config.yaml in global mode now supports a skills: section (previously project-only):

# ~/.config/skillshare/config.yaml
skills:
  - name: my-skill
    repo: owner/repo
  - name: pdf
    group: frontend
    repo: owner/repo

• skillshare install (no args) installs all listed remote skills
• Auto-reconcile keeps the manifest in sync after install/uninstall
• Works with search-to-install flow

6) New audit security rules

Six new detection patterns added to the audit engine:

7) Firebender target

Firebender is a coding agent for JetBrains IDEs with native skills support. Paths: ~/.firebender/skills (global), .firebender/skills (project). Target count now 49+.

Fixes

• Agent target paths synced with upstream — antigravity (global_skills to skills), augment (rules to skills), goose project (.agents/skills to .goose/skills)
• Docusaurus relative doc links — added .md extension to prevent 404s caused by trailing-slash ambiguity

Documentation

• Website restructured — all 9 section index pages now have "What do you want to do?" scenario-driven navigation tables; all 24 command docs standardized with "When to Use" and "See Also" sections
• Intro enhanced — role-based paths (individual / team / migration); "What Just Happened?" explainer on first-sync page
• New pages — declarative manifest concept page, URL formats reference, .skillignore guide, --init-rules workflow expansion, list directory grouping docs
• Audit docs expanded — step-by-step false positive fix workflow with scaffold file preview
• Cross-machine sync — comparison table for push/pull vs install-from-config approaches

Verification

Covered by:

• 7 new integration tests for .skillignore and --exclude
• 5 new integration tests for group field end-to-end flows
• 10+ new integration tests for multi-skill/group uninstall (global + project)
• Unit tests for SkillEntry helpers, reconciler group behavior, and 6 new audit rules
• Install integration tests split by concern for maintainability
• Full suite (make test) passing

Changelog

• 080377f feat(ui): show license field in SkillDetailPage manifest box
• 001fff0 feat: add .skillignore, --exclude flag, and license display for install
• 5709984 feat: add Firebender as a supported target
• 7abe17c feat: add declarative skill manifest for global mode
• 1ff2fe6 feat: add group field to SkillEntry for organized skill placement
• 95e7ee2 feat: auto-detect group in uninstall and update v0.14.0 docs
• 1d0633a feat: expand audit rules with 6 new security patterns
• bd4c970 feat: support group matching in .skillignore via path-based comparison
• 86d6134 feat: support multi-skill and group uninstall
• 47dc949 fix: enforce install flag validation and project uninstall preflight
• b1ede8d fix: handle errors from ReconcileGlobalSkills, filepath.Walk, and remove redundant applyExclude
• f99a29a fix: show license in SkillBox for subdir single-skill install
• 1558642 fix: sync agent target paths with upstream and document push/pull vs config
• 692d87c fix: use .md extension in relative doc links to prevent 404s