Files
PaperClipAI/packages
GardenerandPaperclip 72d065a535 fix(skills-catalog): make the harness non-destructive and ship its evidence
Address the three review findings on the connector skills.

- offline-verification.md: the documented harness took the output directory
  as a required argument and opened with `rm -rf "$OUT"`. It now allocates a
  fresh directory with `mktemp -d` when none is given, and refuses every
  existing destination, the filesystem root, relative paths, symlinks, and
  paths inside the checkout or the corpus. It deletes nothing. The two helper
  scripts drop a marker file in their own root and refuse to run without it.
  All seven refusals and both helper guards were executed against real paths
  with canary files; the recorded output is in the document.

- connect-agent-tools: add references/verification-log.md, so the evidence
  behind every `verified` label ships with the package instead of pointing at
  a file outside the repository. The two deferred rows named a private issue
  tracker; they now describe what the follow-up needs and what it starts from.

Regenerated the catalog manifest. Both packages stay markdown_only.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-09-20 19:53:06 +00:00
..