# Tasks: Skills Product Contracts

## Task List

- [x] **Task 1**: Write local-skills-ux contract spec
    - File: `specs/local-skills-ux/spec.md`
    - Covers: directory layout, SKILL.md format, install/list/remove, validation, trust tier

- [x] **Task 2**: Write third-party-policy contract spec
    - File: `specs/third-party-policy/spec.md`
    - Covers: definition, consent model, trust gate, scanner gate, sandboxing, prompt rendering

- [x] **Task 3**: Write skill-lifecycle contract spec
    - File: `specs/skill-lifecycle/spec.md`
    - Covers: identity, lockfile, install/update/remove flows, agent-driven install, structured
      output

- [x] **Task 4**: Write official-catalog contract spec
    - File: `specs/official-catalog/spec.md`
    - Covers: repository, index format, embedded/cache lifecycle, review standard, versioning

- [x] **Task 5**: Verify all 4 contracts against implementation
    - Cross-check against exploration.md findings and source code references
