autoskills：按项目栈筛选 Agent 技能

Yesterday I deleted another batch of local 𝗖𝗼𝗱𝗲𝘅 𝗮𝗻𝗱 𝗖𝗹𝗮𝘂𝗱𝗲 𝗖𝗼𝗱𝗲 𝘀𝗸𝗶𝗹𝗹𝘀. Models got good enough that some general-purpose skills stopped adding much. Some still covered the same jobs. The agent had a longer list and conflicting rules to resolve. I used to install first. Once the pile got big, I'd figure out which skills did nothing and delete them. Today I found a 𝟲.𝟯𝗞-𝘀𝘁𝗮𝗿 𝗿𝗲𝗽𝗼 𝗰𝗮𝗹𝗹𝗲𝗱 𝗮𝘂𝘁𝗼𝘀𝗸𝗶𝗹𝗹𝘀 that filters candidates before writing a single file: The maintainers keep its registry in sync. On each run, autoskills pulls only the skills that match the current project: → scans package.json, Gradle files, and project config → detects React, Next.js, SwiftUI, Stripe, and the rest of the stack → selects matching skills from a curated registry → uses registry entries that maintainers scan for prompt injection and supply-chain risks → checks every file against the manifest with SHA-256 before writing it → records sources and bundle hashes in skills-lock.json 𝗗𝗿𝘆-𝗿𝘂𝗻 𝗺𝗼𝗱𝗲 shows the install list without touching any files. I'd use autoskills to find candidates, then decide what to install after the dry run. I'd keep only 𝘁𝘄𝗼 𝗸𝗶𝗻𝗱𝘀 𝗼𝗳 𝘀𝗸𝗶𝗹𝗹𝘀: skills with project knowledge the model can't infer, and skills that provide real commands, tools, or verification workflows. Framework-specific skills stay inside each project. I'm done building another global skill landfill lol.