Update the gh skill instructions and v2.0.14 changelog

[AlexJSully]

No description provided.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
portfolio	Ready	Preview	Aug 4, 2026 2:33am

[Copilot]

Pull request overview

This PR prepares the repository for the 2.0.14 release by bumping package versions, updating the changelog, and refining documentation around Agent Skill installation and licensing (including aligning internal-skill licensing expectations with gh skill behaviour).

Changes:

• Bumped the project version to 2.0.14 and updated the lockfile accordingly.
• Updated docs describing gh skill usage and clarified how hidden .claude/ skills are discovered/installed.
• Added MIT licensing metadata/files for internal skills and tightened skill publishability checks to require licensing for all skills.

Reviewed changes

Copilot reviewed 10 out of 11 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
package.json	Bumps package version to 2.0.14 for the release.
package-lock.json	Updates lockfile version metadata and includes a transitive dependency bump.
CLAUDE.md	Clarifies that gh skill does not honour skill visibility metadata.
CHANGELOG.MD	Adds the 2.0.14 release notes entry.
.github/prompts/readme.md	Updates gh skill installation instructions and notes installer visibility differences.
.claude/skills/write-tests/SKILL.md	Adds license: MIT to internal skill frontmatter.
.claude/skills/write-tests/LICENSE.txt	Adds MIT license text to the internal skill directory.
.claude/skills/check-skills/SKILL.md	Adds license: MIT to internal skill frontmatter.
.claude/skills/check-skills/LICENSE.txt	Adds MIT license text to the internal skill directory.
.claude/scripts/check-skill-publishability.mjs	Requires license metadata/files for all skills, while keeping internal-skill path isolation exemptions.
.claude/rules/prompt-skill-sync.md	Updates rules text around licensing/visibility and gh skill behaviour.

Suppressed comments (1)

.claude/rules/prompt-skill-sync.md:65

• This example command is missing the positional <skill> argument, which makes the sentence confusing (it says the command installs skills "by name", but no name is shown).

There is no `public` marker, because public is the absence of `internal`, and the Agent Skills specification defines no visibility field at all. `metadata` is its designated free-form map, and `internal` is the one key an installer actually reads, which is why the state does not survive every installer. `gh skill` reads none of it: `gh skill install <owner>/<repo> --allow-hidden-dirs` lists all six skills here and installs any of them by name. Repository visibility is the only lever there, and the licence on every skill is what keeps that harmless. That flag is also what makes the skills visible at all, since `gh skill` skips `.claude/` as a hidden directory; `npx skills` clones the repository and reads `.claude/skills/` without one.