skillwarden lock
skillwarden lock [paths...]Writes skillwarden.lock (spec) recording every file of every
resolved skill with its SHA-256 plus an aggregate digest per skill. A skill that
changes upstream after you approved it — the classic registry rug-pull — turns CI red
with a per-file diff instead of silently reprogramming your agent.
| Flag | Default | Description |
|---|---|---|
-o, --output <file> |
skillwarden.lock |
Override the lockfile path |
Behavior
Section titled “Behavior”- The lockfile is deterministic: skills and files are sorted by code-point order of
their paths, so re-locking unchanged content produces a byte-identical file except
generatedAt. - All text files in the skill directory are locked (the same set the scanner reads),
up to 1 MiB each.
node_modules,.git,dist, and__pycache__are excluded.
Example
Section titled “Example”skillwarden lock # write skillwarden.lock in the working directoryskillwarden diff # verify: exit 0, no drift