What's new ›

skilldrop 0.16.32

Released 2026-10-20 · npx skilldrop-cli@0.16.32

• A skill's instructions are now held to its permissions. A skill without scripts can still tell your agent to run terraform init or curl a host. The scan now reads every fenced shell block in a skill's instructions, and skilldrop validate fails one that runs a program or reaches a host it doesn't declare. --contain lets shell commands reach only the declared hosts, so they now include the ones instructions need. Six bundled skills declare what their instructions run: sonar-review, terraform-module, terraform-plan-review, mermaid-render, figma-diagrams and dependency-upgrade-review (RFC-0054).
• skilldrop scan checks agents too. It applies the same rules it uses on skills, plus four of its own: - an agent with no tools: list, which inherits every tool; - one that reads from the web or an MCP server and can run commands or edit files in the same context; - a permission mode that skips your approval; - hooks in its frontmatter. scan --agent scans agents only. Installing agents from a third-party catalogue shows the findings, and a policy's scan.max now refuses agents above its limit too.
• dependency-upgrade-review leads with the verdict and what decides it. Each blocker says what breaks, where, why CI missed it, and how to fix it. The review now traces changed APIs to their callers, checks runtime floors against the image and CI, and flags one tag pinned to two SHAs. On new held-out evals, both judges preferred it to plain Claude Code in every pair (RFC-0053).