safe-ai-skill (solanabr/safe-ai-skill, pinned at 2997280 in .claude-plugin/marketplace.json) has had no commits since 2026-06-27. Several of its defects can't be fixed in this repo. This issue tracks them so the kit can re-pin once they land.
| Problem |
Upstream |
Status |
| Session-start sweep quarantines skill packs on plain-text matches |
solanabr/safe-ai-skill#5 |
open; kit-side workaround: #86 |
.env hard deny breaks read-then-edit workflows |
solanabr/safe-ai-skill#7 |
open |
Fails closed (exit 2 on every gated call) where no prebuilt binary exists: Windows, musl. The cargo fallback looks for crates/engine outside the plugin dir, which a git-subdir install doesn't have |
solanabr/safe-ai-skill#6 |
open |
Marketplace name stbr collides with this repo |
solanabr/safe-ai-skill#8 |
open |
Mainnet gate doesn't strip leading VAR=value before base_program (crates/engine/src/gates/bash.rs:52), so CONFIRM_MAINNET=1 solana program deploy ... falls through to Defer |
not filed |
needs an upstream issue |
verify approve <name> restores to the first verify_skills_dirs entry (~/.claude/skills/<name> by default), not .claude/skills/ext/<name>, so a restored pack lands in the wrong place |
not filed |
needs an upstream issue |
There is also a sibling repo to reconcile: solanabr/safe-solana-ai has an unmerged ssai-engine-v1 branch from the same engine's earlier line. Decide which repo is canonical before more work goes into either.
To do
safe-ai-skill (solanabr/safe-ai-skill, pinned at
2997280in.claude-plugin/marketplace.json) has had no commits since 2026-06-27. Several of its defects can't be fixed in this repo. This issue tracks them so the kit can re-pin once they land..envhard deny breaks read-then-edit workflowscrates/engineoutside the plugin dir, which agit-subdirinstall doesn't havestbrcollides with this repoVAR=valuebeforebase_program(crates/engine/src/gates/bash.rs:52), soCONFIRM_MAINNET=1 solana program deploy ...falls through toDeferverify approve <name>restores to the firstverify_skills_dirsentry (~/.claude/skills/<name>by default), not.claude/skills/ext/<name>, so a restored pack lands in the wrong placeThere is also a sibling repo to reconcile:
solanabr/safe-solana-aihas an unmergedssai-engine-v1branch from the same engine's earlier line. Decide which repo is canonical before more work goes into either.To do
safe-solana-ai.shain.claude-plugin/marketplace.json(see the ripple map row for safe-ai-skill).