skill-provenance - SKILL.md Agent Skill

name: skill-provenance description: > Version tracking for Agent Skills and their associated files across sessions, surfaces, and platforms. Keeps version identity with the bundle instead of filenames, using internal headers where practical and a manifest everywhere else. Maintains a manifest and changelog that travel with the skill bundle. Use this skill whenever opening, saving, or handing off a skill project that spans multiple sessions. Compatible with the agentskills.io open standard.

Skill Provenance

The Problem This Solves

Skill projects move between sessions, surfaces (Chat, IDE, CLI, Cowork), platforms (Claude, Gemini CLI, Codex, Copilot), and local storage (Obsidian, working directories, git repos). Version identity gets lost when it lives only in filenames. A file renamed from SKILL_v4.md to SKILL_v5.md with no internal record of what changed creates ambiguity that costs real time to resolve.

This skill establishes three conventions that prevent that:

Version identity lives inside files when their format allows it, and always in the manifest.
A changelog travels with the skill bundle.
A manifest lists all files in the bundle so any session can verify completeness.

What Gets Versioned

A skill bundle is a SKILL.md plus all associated files. Typical contents:

SKILL.md (the skill definition)
evals.json (evaluation suite)
Generation scripts (e.g., generate.js, generate.py)
Output artifacts (.docx, .pdf) produced by evals or real use
Handoff notes
Source material provided by the user (tracked but not versioned)

The skill itself (SKILL.md) and evals are the primary versioned artifacts. Scripts, outputs, and handoff notes are tracked by the manifest but version with the bundle rather than independently.

Internal Version Header

Files that can safely carry YAML frontmatter begin with a YAML frontmatter block (or extend an existing one) containing these fields:

---
skill_bundle: my-skill            # bundle name, stable across versions
file_role: skill                  # skill | evals | script | output | handoff
version: 5                        # integer, monotonically increasing
version_date: 2026-02-10          # date of this version
previous_version: 4               # null for v1
change_summary: >
  Rewrote Phase 5 layout rules. Removed per-section page breaks.
  Added content flow check. Added validation checklist as standalone final page.
---

Rules

version is an integer for per-file tracking. It counts revisions to that specific file within the bundle. The bundle-level version (bundle_version in MANIFEST.yaml) uses semver — see the Manifest section below.

change_summary is required for every version after v1. One to three sentences. Must describe what changed, not just that something changed. "Updated Phase 5" is insufficient. "Rewrote Phase 5 page layout rules: removed per-section page breaks, added content flow check" is sufficient.

previous_version creates a chain. Any session can trace the lineage.

file_role values:

skill — the SKILL.md itself
evals — the evals.json file
script — generation scripts, utility scripts
output — rendered artifacts (.docx, .pdf)
handoff — session handoff notes
source — user-provided source material (tracked, not versioned)
reference — documentation in references/ loaded on demand
asset — templates, images, fonts in assets/ used in output
agents — platform UI metadata (e.g., Codex's agents/openai.yaml)

For files that cannot safely carry YAML frontmatter (binary files like .docx, .pdf, .png, and strict-format files like .json or executable .sh), the manifest tracks their version. They do not get internal headers. For those files, the manifest's version field is authoritative.

SKILL.md frontmatter constraint: The Agent Skills open standard (agentskills.io) requires name and description. Different platforms enforce different rules about additional fields:

Platform	Allowed SKILL.md frontmatter
agentskills.io spec	`name`, `description`, `license`, `metadata`, `compatibility`, `allowed-tools`
Claude (settings importer)	Same as spec. Extra fields rejected.
Gemini CLI (Google)	`name` and `description` only. Extra fields not officially supported.
Codex (OpenAI)	`name` and `description` only. Extra fields rejected.
GitHub Copilot	Follows agentskills.io spec.

For maximum portability, keep SKILL.md frontmatter to name and description only. If you need version info in SKILL.md and are only targeting Claude-compatible platforms, nest it under metadata:

---
name: my-skill
description: What the skill does.
metadata:
  skill_bundle: my-skill
  file_role: skill
  version: 3
  version_date: 2026-02-10
  previous_version: 2
  change_summary: >
    Added Phase 6 validation step.
---

If targeting Codex or other strict platforms, omit metadata from SKILL.md entirely. The manifest tracks SKILL.md's version regardless, so no version information is lost.

Manifest

The manifest is a YAML file named MANIFEST.yaml at the root of the skill bundle directory — the same level as SKILL.md. When the bundle is packaged as a .skill ZIP (Claude's settings export format), the manifest lives inside the ZIP. It is the single source of truth for what the bundle contains.

bundle: my-skill
bundle_version: 5.1.0
bundle_date: 2026-02-10
description: >
  Skill for generating professional documents from source material
  and user briefs. Handles research, structuring, and formatting.

compatibility:
  designed_for:
    platform: Anthropic Claude
    model: Claude Opus 4.6
    surface: Chat, Code
  tested_on:
    - platform: Anthropic Claude
      model: Claude Opus 4.6
      surface: Chat
      status: pass
      date: 2026-02-10
    - platform: Anthropic Claude
      model: Claude Sonnet 4.5
      surface: Chat
      status: partial
      date: 2026-02-09
      notes: Misses staleness detection on complex bundles
  spec_version: agentskills.io/1.0
  frontmatter_mode: minimal
    # minimal = name + description only (Codex, Gemini CLI, max portability)
    # claude = includes metadata block (Claude, Copilot)

files:
  - path: SKILL.md
    role: skill
    version: 5
    hash: sha256:abc123...
    note: Canonical skill definition

  - path: evals.json
    role: evals
    version: 3
    hash: sha256:def456...
    note: 7 evals including real-content synthesis

  - path: scripts/generate.js
    role: script
    version: 4
    hash: sha256:ghi789...
    note: Generation script for eval 3

  - path: outputs/eval3-output.pdf
    role: output
    version: 4
    hash: sha256:jkl012...
    note: Rendered eval 3 output, 10 pages, validated

  - path: handoff.md
    role: handoff
    version: 2
    hash: sha256:mno345...
    note: Session handoff notes

  - path: sources/article-1.md
    role: source
    version: null
    hash: sha256:pqr678...
    note: Source article 1 (published)

Rules

bundle_version uses semver (MAJOR.MINOR.PATCH). Bump MAJOR for breaking changes to the skill's model or interface, MINOR for new features or capabilities, PATCH for fixes and documentation updates. Per-file version fields remain integers — they are revision counters, not release identifiers.

hash is sha256 of the file contents. This is how a new session verifies that the file it received matches what the manifest claims. Compute on save, verify on load.

version: null for source files. They are tracked for completeness but not versioned by this system.

Paths are relative to the bundle root. No absolute paths.

MANIFEST.yaml is not listed in files. Self-hashing is recursive. Treat the manifest as the bundle's control file and verify it via git, transport checksums, or the surrounding package when needed.

The .skill Package Format

Claude's settings UI exports and imports skills as .skill files. These are standard ZIP archives containing a directory named after the skill. The versioning artifacts (MANIFEST.yaml, CHANGELOG.md, README.md) live inside this directory at the same level as SKILL.md:

skill-name.skill (ZIP)
└── skill-name/
    ├── SKILL.md
    ├── MANIFEST.yaml
    ├── CHANGELOG.md
    ├── README.md
    ├── assets/
    └── references/

Claude's settings importer only looks for SKILL.md and the directory structure it expects (references, assets). It ignores files it doesn't recognize. This means the versioning artifacts travel safely inside the .skill ZIP without affecting import/export behavior.

When bootstrapping or updating a bundle, always include the versioning artifacts in the .skill ZIP so they survive round-trips through Claude's settings UI.

Bundles with files that don't fit in .skill: Some bundles include evals, generation scripts, rendered outputs, and handoff notes. The .skill format only carries the skill definition and its references. For bundles with additional tracked files, those files travel separately (uploaded to conversations, stored in working directories, or committed to git). The manifest tracks all files regardless of whether they fit in the .skill ZIP — it is the complete inventory, not just the packaged subset.

Changelog

The changelog is a file named CHANGELOG.md at the root of the skill bundle directory, alongside SKILL.md and MANIFEST.yaml. It is append-only. New entries go at the top.

# Changelog

## 5.1.0 — 2026-02-10
- SKILL.md: Rewrote Phase 5 layout rules. Removed per-section page breaks.
  Added content flow check. Added validation checklist as standalone final page.
- evals.json: Not yet updated (stale, needs alignment).

## 5.0.0 — 2026-02-09
- SKILL.md: Removed minimum section density from Phase 3. Rewrote body section
  flow rules. Added optional appendix section.
- evals.json: Eval 3 expectations updated for content flow.
- generate.js: Body sections flow without page breaks. All 11 expectations pass.

## 4.0.0 — 2026-02-08
- SKILL.md: Added Phase 5 density verification.
- generate.js: First working generation script for eval 3.

Rules

Each entry names every file that changed and what changed in it.

Files that are stale get called out. If SKILL.md changes but evals.json was not updated to match, the changelog says so. This prevents the silent drift that caused the v4/v5 confusion.

Entries are human-written prose, not auto-generated diffs. The point is to communicate intent, not enumerate line changes. Git diffs are available when the bundle is in git.

Session Protocol

Opening a session

When a skill bundle is loaded into a new session:

Read MANIFEST.yaml first.
Verify all listed files are present. Report any missing files.
For files with hashes, verify hashes match. Flag mismatches. In local environments, users can run validate.sh before uploading for reliable hash verification without LLM computation.
Read CHANGELOG.md to understand recent changes.
Check for staleness: if any file's version is lower than the bundle version, flag it as potentially stale and ask the user whether it needs updating.
If MANIFEST.yaml is missing, treat the bundle as unversioned. Offer to create one by inventorying the files and asking the user for version context.

Saving / closing a session

When work is complete and files are being delivered:

Update internal version headers for changed files that use them.
Update MANIFEST.yaml with new versions and hashes for every changed versioned file, including manifest-only files.
Append to CHANGELOG.md.
If any versioned file was changed but another dependent file was not updated (e.g., SKILL.md changed but evals.json was not updated), note the staleness explicitly in the changelog entry.
Deliver the full bundle to the user, or at minimum the changed files plus the updated MANIFEST.yaml and CHANGELOG.md.
If the user indicates the bundle is destined for a git repo, generate a git_commit.txt file containing a ready-to-use commit message derived from the changelog entry. Format:
```
skill-name MAJOR.MINOR.PATCH: one-line summary

- file1.md: what changed
- file2.json: what changed
- Stale: file3.js (not updated this session)
```
The user can pass this directly to git commit -F git_commit.txt. This file is not tracked in the manifest — it is a transient convenience artifact, not part of the bundle.

Handoff between sessions

A handoff note is a snapshot of project state for the next session. It should include:

Current bundle version
What was accomplished this session
What is stale and needs attention
What the next session should do first
Any decisions made that are not yet reflected in the files
Per-file change summaries: for each file modified this session, a brief description of what changed (section added, field removed, logic rewritten, etc.). This is more granular than the changelog entry and helps the next session verify the work without re-reading every file.

The handoff note gets an internal version header when its format allows it and is tracked in the manifest. It replaces (not appends to) the previous handoff note — there is only one active handoff at a time. Previous handoffs are preserved in the changelog history.

Conflict resolution

When a session finds version conflicts (e.g., a file claims v5 but the manifest says v4, or two files claim different bundle versions):

Present the conflict to the user with the specific discrepancy.
Show what each version claims via its change_summary.
Default recommendation: trust the most recent version_date.
Always ask the user for explicit confirmation before proceeding.

Never silently resolve a version conflict. The whole point of this system is to make conflicts visible.

Cross-Surface and Cross-Platform Considerations

Claude Chat

No persistent filesystem. Files are uploaded/downloaded per session. The manifest and changelog must travel with the uploaded files. On session open, verify the bundle. On session close, deliver updated bundle files to the user.

Claude Cowork

Persistent filesystem within a project. The bundle can live as a directory. The manifest and changelog persist between sessions. Same protocol applies but files don't need to be re-uploaded.

Claude Code

Git-native. The manifest and changelog complement git's own versioning. The manifest adds role and staleness tracking that git doesn't provide. The changelog adds intent that commit messages often lack. Hashes in the manifest can be omitted when the bundle is in a git repo since git handles integrity. Version numbers and change summaries remain required.

Codex (OpenAI)

Filesystem-based. Skills live in ~/.codex/skills/ or project directories. Codex rejects SKILL.md frontmatter fields beyond name and description — use frontmatter_mode: minimal in the manifest and omit the metadata block from SKILL.md. Codex's agents/openai.yaml can be tracked in the manifest with role: agents.

Gemini CLI (Google)

Filesystem-based with three-tier skill discovery:

Workspace: .gemini/skills/ in the project directory
User: ~/.gemini/skills/ for skills available across all projects
Extensions: ~/.gemini/extensions/*/skills/ for extension-provided skills

Gemini CLI requires only name and description in SKILL.md frontmatter — use frontmatter_mode: minimal in the manifest and omit the metadata block from SKILL.md. Skills are loaded on-demand by name and description, so context is not bloated by inactive skills.

To install a skill bundle for Gemini CLI, copy or symlink the bundle directory into ~/.gemini/skills/skill-name/. Management commands: gemini skills list, gemini skills install, gemini skills link.

Manifest and changelog are ignored by Gemini CLI (treated as unknown files in the skill directory).

GitHub Copilot / VS Code

Skills in .github/skills/ or .claude/skills/. Follows the agentskills.io spec. Manifest and changelog are ignored by Copilot (treated as unknown files in the skill directory).

General principle

The manifest and changelog are inert files. No platform currently reads them. They exist for the human and for agents that have the skill-provenance skill loaded. This means they never break compatibility — they're invisible to platforms that don't know about them. For maximum portability, this bundle itself ships in frontmatter_mode: minimal; its SKILL.md version is tracked in MANIFEST.yaml.

File Naming

Versioned files use stable names without version numbers:

SKILL.md (not SKILL_v5.md)
evals.json (not evals_v3.json)
generate.js (not generate-v4.js)

The version lives inside the file (via the header) and in the manifest, not in the filename. Version-numbered filenames are how we got into trouble in the first place.

Exception: when a user's local storage requires version-in-filename for their own workflow (e.g., keeping multiple versions visible in Obsidian), the manifest is the tiebreaker for which version is canonical. The internal version identity, when present, must still match.

Bootstrap

To version an existing unversioned skill bundle:

Inventory all files present — read the directory structure or uploaded file list. Do not ask the user to list files; determine this yourself.
Ask the user what version number to assign. If there's a handoff note or other context, propose a number based on the history.
Add internal version headers to files that can safely carry them and record manifest-only versions for strict-format files.
Generate MANIFEST.yaml with hashes.
Create CHANGELOG.md with a single entry summarizing known history.
Deliver the versioned bundle.

This is a one-time operation per skill bundle.