chore: replace ascii-box-check with skillshare skill in hub registry

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,20 @@
+## What
+
+<!-- Brief description of the change -->
+
+## Skill Entry
+
+<!-- If adding/updating a skill, paste your JSON entry here -->
+
+```json
+
+```
+
+## Checklist
+
+- [ ] `skillshare-hub.json` is valid JSON
+- [ ] `name` is lowercase with hyphens only
+- [ ] `description` is a clear one-liner
+- [ ] `source` repo is publicly accessible and contains a valid `SKILL.md`
+- [ ] No duplicate skill name in the hub
+- [ ] Tags are 1-3 lowercase words (see [CONTRIBUTING.md](../CONTRIBUTING.md#tags))

.github/workflows/validate-pr.yml

@@ -31,7 +31,6 @@ jobs:
         run: |
           curl -fsSL https://raw.githubusercontent.com/runkids/skillshare/main/install.sh | sh
           skillshare version
-          skillshare init -g --no-copy --no-targets --no-git --no-skill
 
       - name: Audit new skills
         id: audit

scripts/audit.sh

@@ -44,10 +44,34 @@ details=()
 while IFS= read -r source; do
   [ -z "$source" ] && continue
 
-  if [[ "$source" == http* ]]; then
+  # Parse source into clone_url + optional subpath
+  subpath=""
+  if [[ "$source" =~ ^https?://github\.com/([^/]+/[^/]+)/tree/[^/]+/(.+)$ ]]; then
+    # GitHub browser URL: https://github.com/owner/repo/tree/branch/path
+    clone_url="https://github.com/${BASH_REMATCH[1]}.git"
+    subpath="${BASH_REMATCH[2]}"
+  elif [[ "$source" =~ ^https?://github\.com/([^/]+/[^/]+)/?$ ]]; then
+    # GitHub repo URL (no subpath): https://github.com/owner/repo
+    clone_url="https://github.com/${BASH_REMATCH[1]}.git"
+  elif [[ "$source" =~ ^github\.com/([^/]+/[^/]+)(/(.+))?$ ]]; then
+    # github.com shorthand: github.com/owner/repo[/path]
+    clone_url="https://github.com/${BASH_REMATCH[1]}.git"
+    subpath="${BASH_REMATCH[3]}"
+  elif [[ "$source" =~ ^(https?://[^/]+)/([^/]+/[^/]+)/src/branch/[^/]+/(.+)$ ]]; then
+    # Gitea/Forgejo browser URL: https://host/owner/repo/src/branch/main/path
+    clone_url="${BASH_REMATCH[1]}/${BASH_REMATCH[2]}.git"
+    subpath="${BASH_REMATCH[3]}"
+  elif [[ "$source" =~ ^(https?://[^/]+)/([^/]+/[^/]+)/src/branch/ ]]; then
+    # Gitea/Forgejo repo URL (branch root, no subpath)
+    clone_url="${BASH_REMATCH[1]}/${BASH_REMATCH[2]}.git"
+  elif [[ "$source" == http* ]]; then
+    # Other HTTP URLs — use as-is
     clone_url="$source"
   else
-    clone_url="https://github.com/${source}.git"
+    # GitHub shorthand: owner/repo[/path]
+    owner_repo=$(echo "$source" | cut -d'/' -f1-2)
+    subpath=$(echo "$source" | cut -d'/' -f3-)
+    clone_url="https://github.com/${owner_repo}.git"
   fi
 
   safe_name=$(echo "$source" | tr '/' '-')
@@ -64,28 +88,48 @@ while IFS= read -r source; do
     continue
   fi
 
-  audit_output=$(skillshare audit "$clone_dir" --threshold high 2>&1 | sed 's/\x1b\[[0-9;]*m//g') || true
-
-  echo "$audit_output"
+  # Audit subpath if specified, otherwise audit entire clone
+  audit_target="$clone_dir"
+  if [ -n "$subpath" ] && [ -d "$clone_dir/$subpath" ]; then
+    audit_target="$clone_dir/$subpath"
+  fi
 
-  # Extract risk score and label
-  risk=$(echo "$audit_output" | sed -n 's/.*Risk: \([A-Z]* ([0-9]*\/[0-9]*)\).*/\1/p' | tail -1)
-  [ -z "$risk" ] && risk="N/A"
-  risk_label=$(echo "$risk" | awk '{print $1}')
+  audit_json=$(skillshare audit "$audit_target" --threshold high --json 2>/dev/null) || true
 
-  if echo "$audit_output" | grep -q "config not found"; then
-    results+=("| \`${source}\` | :x: No config | - |")
-    details+=("DETAIL_SEP### \`${source}\`"$'\n'"No skillshare config found. Run \`skillshare init\` in the source repo.")
-    log_error "No skillshare config found for ${source}. Run 'skillshare init' in the source repo."
+  # Check if output is valid audit JSON
+  if ! echo "$audit_json" | jq -e '.summary' >/dev/null 2>&1; then
+    # Not valid JSON — command errored (e.g. path not found)
+    audit_err=$(skillshare audit "$audit_target" --threshold high 2>&1) || true
+    echo "$audit_err"
+    results+=("| \`${source}\` | :x: Error | - |")
+    details+=("DETAIL_SEP### \`${source}\`"$'\n'"\`\`\`"$'\n'"${audit_err}"$'\n'"\`\`\`")
     failed=1
-  elif [[ "$risk_label" == "HIGH" || "$risk_label" == "CRITICAL" ]]; then
+    rm -rf "$clone_dir"
+    log_endgroup
+    continue
+  fi
+
+  # Extract risk info with jq
+  risk_score=$(echo "$audit_json" | jq -r '.summary.riskScore')
+  risk_label=$(echo "$audit_json" | jq -r '.summary.riskLabel' | tr '[:lower:]' '[:upper:]')
+  risk="${risk_label} (${risk_score}/100)"
+
+  # Format findings for display
+  findings_text=$(echo "$audit_json" | jq -r '
+    [.results[] | (.findings // [])[] | "  \(.severity): \(.message) (\(.file):\(.line))\n  \"\(.snippet)\""]
+    | join("\n\n")')
+  audit_display="Risk: ${risk}"
+  [ -n "$findings_text" ] && audit_display="${audit_display}"$'\n\n'"${findings_text}"
+  echo "$audit_display"
+
+  if [[ "$risk_label" == "HIGH" || "$risk_label" == "CRITICAL" ]]; then
     results+=("| \`${source}\` | :x: Risk ${risk_label} | ${risk} |")
-    details+=("DETAIL_SEP### \`${source}\`"$'\n'"\`\`\`"$'\n'"${audit_output}"$'\n'"\`\`\`")
+    details+=("DETAIL_SEP### \`${source}\`"$'\n'"\`\`\`"$'\n'"${audit_display}"$'\n'"\`\`\`")
     log_error "Risk ${risk_label} for ${source}"
     failed=1
   else
     results+=("| \`${source}\` | :white_check_mark: Passed | ${risk} |")
-    details+=("DETAIL_SEP### \`${source}\`"$'\n'"\`\`\`"$'\n'"${audit_output}"$'\n'"\`\`\`")
+    details+=("DETAIL_SEP### \`${source}\`"$'\n'"\`\`\`"$'\n'"${audit_display}"$'\n'"\`\`\`")
   fi
 
   rm -rf "$clone_dir"

scripts/validate.sh

@@ -31,6 +31,14 @@ if [ -n "$dupes" ]; then
 fi
 echo "OK: no duplicate names"
 
+# Check no duplicate sources
+dupe_sources=$(jq -r '[.skills[].source] | group_by(.) | map(select(length > 1)) | flatten | unique | .[]' "$HUB_FILE")
+if [ -n "$dupe_sources" ]; then
+  echo "ERROR: Duplicate skill sources: $dupe_sources"
+  exit 1
+fi
+echo "OK: no duplicate sources"
+
 # Check name format (lowercase, hyphens only)
 bad_names=$(jq -r '.skills[].name | select(test("^[a-z0-9][a-z0-9-]*$") | not)' "$HUB_FILE")
 if [ -n "$bad_names" ]; then

skillshare-hub.json

@@ -1,16 +1,6 @@
 {
   "schemaVersion": 1,
   "skills": [
-    {
-      "name": "ascii-box-check",
-      "description": "Verify and fix ASCII box-drawing diagram alignment in markdown files",
-      "source": "runkids/my-skills",
-      "skill": "ascii-box-check",
-      "tags": [
-        "docs",
-        "workflow"
-      ]
-    },
     {
       "name": "skill-creator",
       "description": "Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends Claude's capabilities with specialized knowledge, workflows, or tool integrations.",
@@ -19,6 +9,16 @@
       "tags": [
         "skill"
       ]
+    },
+    {
+      "name": "skillshare",
+      "description": "Built-in AI skill for skillshare – helps install, search, and manage skills from the hub",
+      "source": "https://github.com/runkids/skillshare/tree/main/skills/skillshare",
+      "tags": [
+        "skillshare",
+        "agent",
+        "skill"
+      ]
     }
   ]
 }