Issues

• docs: qualify cosign warnings and runtime dependencies

  documentationpriority:low
  richardcase/satchel#124 · Filter by author richardcase opened on Aug 31, 2026

• install: accept multiple source arguments in one invocation

  enhancementpriority:medium
  richardcase/satchel#123 · Filter by author richardcase opened on Aug 31, 2026

• registry: keep scheduled refresh report-only

  bugpriority:medium
  richardcase/satchel#122 · Filter by author richardcase opened on Aug 31, 2026

• adopt: do not attribute npx content to an unverified remote HEAD

  bugpriority:low
  richardcase/satchel#121 · Filter by author richardcase opened on Aug 31, 2026

• state: fsync the parent directory after atomic commit

  priority:lowtech-debt
  richardcase/satchel#120 · Filter by author richardcase opened on Aug 31, 2026

• plugin: include installation scope when matching installed plugins

  bugpriority:low
  richardcase/satchel#119 · Filter by author richardcase opened on Aug 31, 2026

• config: reject unsafe or ambiguous target definitions

  bugpriority:low
  richardcase/satchel#118 · Filter by author richardcase opened on Aug 31, 2026

• list: accept OCI in include/exclude channel filters

  bugpriority:medium
  richardcase/satchel#117 · Filter by author richardcase opened on Aug 31, 2026

• package: honor nested .gitignore precedence

  bugpriority:medium
  richardcase/satchel#116 · Filter by author richardcase opened on Aug 31, 2026

• package: sign the immutable OCI digest instead of the tag

  bugpriority:medium
  richardcase/satchel#115 · Filter by author richardcase opened on Aug 31, 2026

• package: reject symlinks that escape the artifact root

  bugpriority:medium
  richardcase/satchel#114 · Filter by author richardcase opened on Aug 31, 2026

• doctor: evaluate plugin fan-out links against the owning skill

  bugpriority:medium
  richardcase/satchel#113 · Filter by author richardcase opened on Aug 31, 2026

• remove: preserve links when selected targets share a directory

  bugpriority:medium
  richardcase/satchel#112 · Filter by author richardcase opened on Aug 31, 2026

• Is there any value in maintaining search command?

  priority:medium
  richardcase/satchel#103 · Filter by author richardcase opened on Aug 31, 2026

• feat: publish an AUR (Arch Linux) package

  priority:low
  richardcase/satchel#99 · Filter by author richardcase opened on Aug 29, 2026

• feat: verify signed git commits/tags on install

  priority:low
  richardcase/satchel#95 · Filter by author richardcase opened on Aug 21, 2026

• Quality signals: stars and last-commit age in install/info

  priority:low
  richardcase/satchel#93 · Filter by author richardcase opened on Aug 21, 2026

• skillsctl link doesn't check agents: frontmatter

  priority:medium
  richardcase/satchel#92 · Filter by author richardcase opened on Aug 21, 2026

• Discovery & trust: search, quality signals, skill lint

  enhancementpriority:low
  richardcase/satchel#87 · Filter by author richardcase opened on Aug 21, 2026

• Lifecycle safety: diff, rollback, agent-compatibility metadata

  enhancementpriority:low
  richardcase/satchel#85 · Filter by author richardcase opened on Aug 21, 2026

• Split cli reference into own doc

  priority:low
  richardcase/satchel#71 · Filter by author richardcase opened on Aug 18, 2026

• Consider signature verification for non-OCI channels

  priority:low
  richardcase/satchel#66 · Filter by author richardcase opened on Aug 18, 2026
  1

• Config-level trust policy for OCI signature verification

  priority:low
  richardcase/satchel#65 · Filter by author richardcase opened on Aug 18, 2026

• Convenience wrapper for cosign key generation

  priority:low
  richardcase/satchel#63 · Filter by author richardcase opened on Aug 18, 2026

• A failed Exec op appends a redundant error line after the tool's own message

  priority:low
  richardcase/satchel#37 · Filter by author richardcase opened on Aug 14, 2026