Skills Lock

Overview

Create a deterministic manifest of the skill entrypoints and every packaged support file under skills/. The manifest proves byte-level consistency; it does not certify that content is correct, safe, or trustworthy. Review sources and executable scripts separately.

This repository's schema records both a compatibility-oriented skills index and a complete artifacts index. It does not invent dependency, version, or modification-time fields that cannot be derived reliably from the package.

When to Use

• A skill repository needs a reviewable inventory of everything it ships.
• CI must reject a stale lock after any skill, reference, template, script, or asset changes.
• An installer or reviewer needs to verify a checkout before loading instructions.
• Catalog counts disagree and need one filesystem-derived source of truth.
• The user asks to generate, audit, or explain skills.lock.

Authoritative Foundations