Development Tasks — agent-skill-manager

Development Tasks — agent-skill-manager

**Source:** [prd.md](prd.md) **Generated:** 2026-03-19 **Strategy:** "npm for AI skills" — become the package manager standard

---

Development Phases

Phase	Focus	Version	Tasks
POC	Universal compatibility	v1.11	7
MVP	The registry	v2.0	8
Full	Ecosystem lock-in	v2.x	6
Future	Platform	v3.0	5

---

Dependency Graph

Wave 1 (no dependencies — start immediately):
  1.1  Expand providers to 15+
  1.5  Fix $EDITOR with spaces (#16)
  1.6  Rename "Provider" to "Tool" (#12)
  1.7  Add creator column to list (#11)

Wave 2 (depends on Wave 1):
  1.2  .skill-lock.json format
  1.3  Enrich skill-index metadata (#10)

Wave 3 (depends on Wave 2):
  1.4  asm outdated
  2.1  asm update

Wave 4 (depends on Wave 3):
  2.2  Pre-install security summary (#15)
  2.3  Parse full SKILL.md spec (#14)
  2.4  Interactive checkbox picker (#9)

Wave 5 (depends on Wave 4):
  2.5  Quality scoring
  2.6  Install command in index search (#8)
  2.7  Registry shorthand install
  2.8  Curated repos JSON (#13)

Wave 6 (depends on Wave 5):
  3.1  Static registry website
  3.2  asm publish

Wave 7 (future):
  3.3-3.6, 4.1-4.5

**Critical path:** 1.1 → 1.2 → 1.4 → 2.1 → 2.5 → 3.1 → 3.2

---

Sprint 1 — POC: Universal Compatibility (v1.11)

Task 1.1: Expand default providers to 15+ agents

**Description:** Add Cursor, Windsurf, Cline, Roo Code, Continue, GitHub Copilot, Aider, OpenCode, Zed, Augment, Amp to default config. Config-only change in `src/config.ts`.

**Acceptance Criteria:**

• Default config includes 15+ provider entries with correct global/project paths
• asm list discovers skills from all configured agents
• asm install -p cursor installs to Cursor's skill directory
• README and docs updated with full provider table
• Tests updated for new default provider count

**Dependencies:** None **PRD Reference:** Section 5.1 **GitHub Issues:** None (internal improvement)

---

Task 1.2: Implement `.skill-lock.json` format

**Description:** Create lock file system to track installed skill sources and commit hashes. Write on install, remove entry on uninstall. Handles corruption gracefully.

**Acceptance Criteria:**

• Lock file schema defined: { version, skills: { [name]: { source, commitHash, ref, installedAt, provider } } }
• src/utils/lock.ts module with readLock(), writeLockEntry(), removeLockEntry() functions
• asm install writes lock entry on successful install
• asm uninstall removes lock entry
• Corruption handling: warn + rebuild from installed skills scan
• Schema version field for future migration
• Unit tests for read, write, remove, corruption recovery

**Dependencies:** None **PRD Reference:** Section 5.2 **GitHub Issues:** None

---

Task 1.3: