Metadata-Version: 2.5
Name: bob-skills
Version: 0.2.0
Summary: Install, verify and guard skill packs for IBM Bob from the Bob Skills Marketplace
Project-URL: Homepage, https://github.ibm.com/Maria-Startseva/bob-skills-marketplace
Project-URL: Repository, https://github.ibm.com/Maria-Startseva/bob-skills-marketplace
Project-URL: Documentation, https://github.ibm.com/Maria-Startseva/bob-skills-marketplace#readme
Author: Bob Skills Marketplace team
License-Expression: Apache-2.0
Keywords: agent-skills,ibm-bob,marketplace,mcp,security,supply-chain
Classifier: Development Status :: 3 - Alpha
Classifier: Environment :: Console
Classifier: Intended Audience :: Developers
Classifier: License :: OSI Approved :: Apache Software License
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.11
Classifier: Programming Language :: Python :: 3.12
Classifier: Programming Language :: Python :: 3.13
Classifier: Topic :: Security
Classifier: Topic :: Software Development :: Build Tools
Requires-Python: >=3.11
Requires-Dist: jsonschema>=4.20
Requires-Dist: pyyaml>=6.0
Requires-Dist: typer>=0.12
Description-Content-Type: text/markdown

# bob-skills

Client for the Bob Skills Marketplace: installs vendor-signed skill packs into IBM Bob, keeps a lock file, and guards `use_skill` activations.

```bash
uvx bob-skills search orchestrate      # find packs
uvx bob-skills add wxo-adk             # install into ./.bob (add --global for ~/.bob)
uvx bob-skills add wxo-adk@1.0.0       # pin or roll back
uvx bob-skills list                    # what is installed
uvx bob-skills verify                  # digests + policy linter on installed skills
uvx bob-skills update [--apply]        # newer versions, SKILL.md diffs, revocations
uvx bob-skills remove wxo-adk          # cleans MCP entries, rules, commands, modes too
uvx bob-skills trust my-local-skill    # accept a project-local skill as it is now
uvx bob-skills guard                   # PreToolUse hook: JSON on stdin, exit 2 blocks
uvx bob-skills check --brief           # SessionStart hook: one status line
uvx bob-skills lint <pack-or-skill>    # marketplace policy linter (text or --format sarif)
bob-skills registry validate|build-index   # registry maintenance
```

Install once, straight from the registry repository (needs git access to github.ibm.com):

```bash
uv tool install "git+https://github.ibm.com/Maria-Startseva/bob-skills-marketplace.git#subdirectory=cli"
```

Or run from a checkout without installing: `uv run --project cli bob-skills --help`. `uvx bob-skills` will work once the package is published to an index; the name is free on PyPI.

Set `BOB_SKILLS_REGISTRY` to a local checkout or another git URL to use a different registry.
