v0.8.2: security hardening, thread safety, doc updates

- 🔴 Path traversal guard: ValidateSkillName() rejects /, \, .., hidden prefixes

- 🔴 Session file perms: 0644 -> 0600

- 🟠 Thread safety: sync.RWMutex on SkillManager

- 🟠 Input size limits: 1MB max on skill body

- 🟠 go run/go tool/generate -> code_execution; go install <path> -> install

- 🟠 Config: sandbox_volumes now accumulates (not replaces) across layers

- 🟡 Dead code: removed unused safePrefixes/safeGoSubcommands vars

- 🟡 Stopword dedup: trigger.go now calls shared IsStopword()

- 🟡 Init template: skills section included in generated config

- 🟡 Renderer: truncate() uses rune count (fixes CJK/emoji breakage)

- 📚 README/CLI.md/CONFIG.md: skills system, --learn, import, curate, config ref

Author: jkyberneees

README.md

@@ -21,6 +21,7 @@ kode run "Fix the OOM bug in default-hooks.js"
 - **Single binary** — `go build` → one file. Drop it anywhere.
 - **Multi-turn** — `kode run --session` and `kode continue` for persistent conversations
 - **Configurable** — 4-layer config (global → project → env → CLI), `${VAR}` substitution
+- **Skills system** — On-demand knowledge through trigger‑matched SKILL.md files. Auto‑learn patterns with `--learn`. Import skills from URIs with LLM risk assessment.
 
 ## Install
 
@@ -68,6 +69,9 @@ kode run --model gpt-4o --base-url https://api.openai.com/v1 "Explain this code"
 
 # Sandboxed execution
 kode run --sandbox "npm test"
+
+# Enable skill learning (auto-detects patterns, suggests skills)
+kode run --learn "Set up a Go project with CI"
 ```
 
 ## Documentation
@@ -80,20 +84,27 @@ kode run --sandbox "npm test"
 | **Multi-Turn Sessions** | [docs/SESSIONS.md](docs/SESSIONS.md) — save, continue, list, trim, cleanup |
 | **Sandboxing** | [docs/SANDBOXING.md](docs/SANDBOXING.md) — Docker isolation, security, config |
 | **Security** | [docs/SECURITY.md](docs/SECURITY.md) — prompt injection, sandbox model |
+| **Skills** | [docs/CLI.md#skills](docs/CLI.md#skills) — learn, list, save, import, curate |
 | **Development** | [docs/DEVELOPMENT.md](docs/DEVELOPMENT.md) — building, testing, contributing |
 
 ## Quick reference
 
 ```bash
 # Commands
 kode run [flags] <task>                        # Single-shot task
+kode run --learn [flags] <task>                # Run with skill learning
 kode run --session [flags] <task>              # Save as session
 kode continue [--id <id>] <task>               # Continue a session
 kode session list                               # List sessions
 kode session show [id]                          # Show session transcript
 kode session delete <id>                        # Delete a session
 kode session trim <id> <n>                     # Keep last n messages
 kode session cleanup <days>                    # Delete old sessions
+kode skill list                                 # List available skills
+kode skill view <name>                          # View a skill
+kode skill delete <name>                        # Delete a skill
+kode skill import <uri> [--basic --yes]         # Import skill from URI
+kode skill curate                               # Quality/overlap audit
 kode init [--global] [--force]                  # Create config file
 kode version                                    # Print version
 
@@ -102,6 +113,7 @@ kode version                                    # Print version
 --base-url <url>       # API endpoint
 --sandbox              # Docker sandbox mode
 --thinking <level>     # enabled/disabled/low/medium/high
+--learn                # Enable skill learning mode
 --system <prompt>      # System prompt override
 --no-agents            # Skip AGENTS.md
 ```
@@ -123,7 +135,7 @@ result, err := agent.Run(context.Background(), "Summarize this codebase")
 
 ```bash
 go test ./...
-# 108+ tests, all pass, zero external dependencies
+# 140+ tests, all pass, zero external dependencies
 ```
 
 ## License

cmd/kode/main.go

@@ -338,6 +338,21 @@ const defaultConfigTemplate = `{
     },
     "allowlist": [],
     "denylist": []
+  },
+  "skills": {
+    "max_auto_load": 3,
+    "max_lazy_slots": 5,
+    "learn": false,
+    "dirs": [],
+    "import": {
+      "max_size_bytes": 1048576,
+      "timeout_seconds": 5,
+      "require_https": false
+    },
+    "curation": {
+      "staleness_days": 90,
+      "auto_prune": false
+    }
   }
 }`
 

docs/CLI.md

@@ -6,13 +6,19 @@
 |---------|-------------|
 | `kode run [flags] <task>` | Execute a task with the agent loop (single-shot by default) |
 | `kode run --session [flags] <task>` | Execute and save conversation as a multi-turn session |
+| `kode run --learn [flags] <task>` | Execute with skill learning (detects patterns, suggests skills) |
 | `kode continue [--id <id>] <task>` | Continue the most recent session (or by `--id`) |
 | `kode repl [--id <id>]` | Interactive REPL mode (persistent multi-turn session) |
 | `kode session list` | List sessions |
 | `kode session show [id]` | Show session details (default: latest) |
 | `kode session delete <id>` | Delete a session |
 | `kode session trim <id> <n>` | Keep only the `n` most recent messages |
 | `kode session cleanup <days>` | Delete sessions older than N days |
+| `kode skill list` | List all available skills |
+| `kode skill view <name>` | View a skill's full content |
+| `kode skill delete <name>` | Delete a skill |
+| `kode skill import <uri> [flags]` | Import a skill from file:// or https:// |
+| `kode skill curate` | Analyze skills for quality, staleness, trigger overlap |
 | `kode init [--global] [--force]` | Create a config file template |
 | `kode version` | Print version and exit |
 
@@ -28,6 +34,7 @@
 | `--no-color` | bool | false | Disable colored terminal output |
 | `--no-agents` | bool | false | Skip loading AGENTS.md |
 | `--session` | bool | false | Save conversation as a multi-turn session |
+| `--learn` | bool | false | Enable skill learning mode (detects patterns, saves skills) |
 | `--system <prompt>` | string | built-in | Override system prompt |
 
 ## Shell tool schema
@@ -52,8 +59,8 @@ When running without `--sandbox`, kode classifies every shell command by risk an
 | 🟠 system_write | **prompt** | `sudo`, `apt install`, writes to `/etc/` |
 | 🔴 destructive | **deny** | `rm -rf /`, `dd if=/dev/zero`, `mkfs` |
 | 🔴 network_egress | **prompt** | `curl`, `git push`, `ssh`, `scp` |
-| 🔴 code_execution | **prompt** | `curl url \| bash`, `eval`, `node -e` |
-| 🟠 install | **prompt** | `npm install`, `pip install`, `go install <remote>` |
+| 🔴 code_execution | **prompt** | `curl url \| bash`, `eval`, `node -e`, `go run` |
+| 🟠 install | **prompt** | `npm install`, `pip install`, `go install <path>` |
 | ⬛ blocked | **deny** | Fork bombs, `dd` to block devices |
 
 The approval prompt accepts:
@@ -82,6 +89,87 @@ Configurable via `dangerous` section in `~/kode/config.json` or `./kode.json`:
 
 See [docs/SECURITY.md](docs/SECURITY.md) for details.
 
+## Skills
+
+The **skills system** provides just-in-time domain knowledge to the agent. Skills are SKILL.md files
+with YAML frontmatter that define trigger keywords, quality metadata, and markdown body content.
+
+### How skills work
+
+1. Skills are stored in `~/.kode/skills/<name>/SKILL.md` (user-global) or `./.kode/skills/<name>/SKILL.md` (project)
+2. Skills with `auto_load: true` are injected into the system prompt on start
+3. Lazy skills are loaded on demand when the user's input matches their trigger keywords (topic × action)
+4. The `--learn` flag detects reusable patterns during a run and prompts to save as a draft skill
+
+### Skill commands
+
+```bash
+# List all skills
+kode skill list
+
+# View a skill's full content
+kode skill view docker-build
+
+# Delete a skill
+kode skill delete docker-build
+
+# Import a skill from a file or URL
+kode skill import ./skills/my-skill.md
+kode skill import https://example.com/skills/deploy.md
+
+# Import with flags
+kode skill import https://example.com/skills/deploy.md --basic   # skip LLM risk assessment
+kode skill import https://example.com/skills/deploy.md --yes     # auto-approve (scripting)
+
+# Run curation (quality, staleness, overlap checks)
+kode skill curate
+```
+
+### Skill file format
+
+```yaml
+---
+name: docker-build
+description: Build and optimize Docker images
+version: 1.0.0
+author: kode
+kode:
+  trigger:
+    topic: docker container image
+    action: build optimize
+  auto_load: false
+  quality: verified
+---
+## Overview
+
+Procedure for building optimized Docker images.
+
+## Step-by-Step
+
+1. Write a `.dockerignore` file
+2. Use multi-stage builds
+3. Run `docker build -t <name> .`
+
+## Common Pitfalls
+
+- Forgetting `.dockerignore` leads to large build contexts
+- Not pinning base image versions causes build drift
+
+## Verification
+
+- `docker build` exits with code 0
+- `docker images` shows the new image
+```
+
+### Curation
+
+The `kode skill curate` command runs four quality passes:
+
+- **Staleness** — flags skills unused for 90+ days (configurable via `skill.curation.staleness_days`)
+- **Trigger overlap** — detects skills with 2+ shared topic keywords that may need merging
+- **Quality audit** — checks for missing sections, short bodies, long descriptions
+- **Body dedup** — detects skills with identical body content by SHA256 hash
+
 ## Sandbox flags
 
 | Flag | Default | Description |
@@ -144,6 +232,9 @@ kode run --sandbox --sandbox-image node:20-alpine "node --version"
 
 # Custom system prompt
 kode run --system "You are a Go expert. Answer with code only." "Write HTTP server"
+
+# Run with skill learning
+kode run --learn "Set up CI with GitHub Actions"
 ```
 
 ## Config priority

docs/CONFIG.md

@@ -62,6 +62,7 @@ Every config knob has a `KODE_*` counterpart:
 | `KODE_NO_COLOR` | `--no-color` | bool |
 | `KODE_NO_AGENTS` | `--no-agents` | bool |
 | `KODE_SYSTEM` | `--system` | string |
+| `KODE_SKILLS_LEARN` | `skills.learn` | bool |
 | `KODE_SANDBOX_IMAGE` | `--sandbox-image` | string |
 | `KODE_SANDBOX_NETWORK` | `--sandbox-network` | string |
 | `KODE_SANDBOX_READONLY` | `--sandbox-readonly` | bool |
@@ -73,6 +74,42 @@ Every config knob has a `KODE_*` counterpart:
 
 `KODE_API_KEY` → `DEEPSEEK_API_KEY` → `OPENAI_API_KEY`
 
+## Skills configuration
+
+The `skills` section controls the skill system:
+
+```json
+{
+  "skills": {
+    "max_auto_load": 3,
+    "max_lazy_slots": 5,
+    "learn": false,
+    "dirs": [],
+    "import": {
+      "max_size_bytes": 1048576,
+      "timeout_seconds": 5,
+      "require_https": false
+    },
+    "curation": {
+      "staleness_days": 90,
+      "auto_prune": false
+    }
+  }
+}
+```
+
+| Field | Env var | Default | Description |
+|-------|---------|---------|-------------|
+| `max_auto_load` | — | 3 | Max skills injected into system prompt on start |
+| `max_lazy_slots` | — | 5 | Max skills loaded per user input via trigger matching |
+| `learn` | `KODE_SKILLS_LEARN` | false | Enable skill learning mode (detects patterns, suggests skills) |
+| `dirs` | — | [] | Extra skill directories beyond `~/.kode/skills` and `./.kode/skills` |
+| `import.max_size_bytes` | — | 1048576 (1MB) | Max size for fetched skill content |
+| `import.timeout_seconds` | — | 5 | HTTP timeout for skill URI fetch |
+| `import.require_https` | — | false | Reject http:// URIs when true |
+| `curation.staleness_days` | — | 90 | Days without use before flagging as stale |
+| `curation.auto_prune` | — | false | Auto-delete stale skills on curate (no prompt) |
+
 ## kode init
 
 Create a config file template:
@@ -102,6 +139,9 @@ kode run "quick status"
 # Env var override for one-off
 KODE_SANDBOX=true kode run "run untrusted script"
 
+# Enable skill learning via env var
+KODE_SKILLS_LEARN=true kode run "set up CI"
+
 # CLI flag always wins
 kode run --model gpt-4o --base-url https://api.openai.com/v1 "task"
 ```

internal/config/loader.go

@@ -13,6 +13,7 @@ package config
 
 import (
 	"encoding/json"
+	"fmt"
 	"os"
 	"path/filepath"
 	"strconv"
@@ -202,7 +203,8 @@ func loadFile(path string) FileConfig {
 	}
 	var cfg FileConfig
 	if err := json.Unmarshal(data, &cfg); err != nil {
-		return FileConfig{} // invalid JSON = empty (silent)
+		fmt.Fprintf(os.Stderr, "kode: warning: config %s: invalid JSON — ignoring file: %v\n", path, err)
+		return FileConfig{} // invalid JSON = empty
 	}
 	// Expand environment variables in all string fields
 	cfg.Model = expandEnv(cfg.Model)
@@ -536,7 +538,7 @@ func overlayFile(base, override FileConfig) FileConfig {
 		}
 	}
 	if override.SandboxVolumes != nil {
-		base.SandboxVolumes = append([]string{}, override.SandboxVolumes...)
+		base.SandboxVolumes = append(base.SandboxVolumes, override.SandboxVolumes...)
 	}
 	if override.Dangerous != nil {
 		base.Dangerous = override.Dangerous

internal/danger/classifier.go

@@ -266,20 +266,8 @@ func tokenize(input string) []string {
 }
 
 // ── Safe command prefixes ──────────────────────────────────────────────
-
-var safePrefixes = map[string]bool{
-	"ls": true, "cat": true, "head": true, "tail": true,
-	"less": true, "more": true, "pwd": true, "which": true,
-	"find": true, "grep": true, "egrep": true, "fgrep": true,
-	"wc": true, "sort": true, "uniq": true, "diff": true, "cmp": true,
-	"date": true, "env": true, "printenv": true, "cd": true,
-	"go": true, // prefix-checked below for subcommands
-}
-
-// safeGoSubcommands are go subcommands with no side effects.
-var safeGoSubcommands = map[string]bool{
-	"build": true, "vet": true, "fmt": true, "mod": true, "test": true,
-}
+// (Unused — classification falls through to Safe by default. Kept as
+// documentation of what's considered read-only.)
 
 var writePrefixes = map[string]bool{
 	"echo": true, "sed": true, "awk": true, "tee": true,
@@ -597,6 +585,14 @@ func isCodeExecution(first string, tokens []string) bool {
 	}
 
 	if !codeEvalPrefixes[first] {
+		// Check go run / go tool — compiles and executes code
+		if first == "go" {
+			for _, tok := range tokens[1:] {
+				if tok == "run" || tok == "tool" || tok == "generate" {
+					return true
+				}
+			}
+		}
 		return false
 	}
 
@@ -634,21 +630,19 @@ func isInstall(first string, tokens []string) bool {
 		return hasArgAfter(tokens, "cargo", "install")
 	}
 
-	// go install <remote>
+	// go install <remote> OR go install <local-path>
 	if first == "go" {
-		// go install with no args = local build (safe)
-		// go install <path>@<version> = remote install
 		hasInstall := false
 		for _, tok := range tokens[1:] {
 			if tok == "install" {
 				hasInstall = true
 				continue
 			}
-			if hasInstall && strings.Contains(tok, "@") {
-				return true
+			if hasInstall {
+				return true // go install <something> downloads deps
 			}
 		}
-		return false
+		return false // bare "go install" = local build only
 	}
 
 	// brew install

internal/render/render.go

@@ -22,6 +22,7 @@ import (
 	"os"
 	"strings"
 	"time"
+	"unicode/utf8"
 )
 
 // ── Events ────────────────────────────────────────────────────────────
@@ -222,12 +223,14 @@ func (r *Renderer) style(code, text string) string {
 	return code + text + reset
 }
 
-// truncate limits s to n chars, adding "…" if truncated.
+// truncate limits s to n characters (not bytes), adding "…" if truncated.
 func (r *Renderer) truncate(s string, n int) string {
-	if len(s) <= n {
+	if utf8.RuneCountInString(s) <= n {
 		return s
 	}
-	return s[:n] + "…"
+	// Convert to runes, truncate, then convert back
+	runes := []rune(s)
+	return string(runes[:n]) + "…"
 }
 
 // ── Auto-detection ────────────────────────────────────────────────────