Skip bundled files during asset preparation in skill-release workflow

.github/workflows/skill-release.yml

@@ -301,6 +301,12 @@ jobs:
           jq -r '.sbom.files[].path' "$SKILL_PATH/skill.json" > "$TEMPFILE"
 
           while IFS= read -r file; do
+            # Skip bundled files - they're only for the .skill package
+            if [[ "$file" == bundled/* ]]; then
+              echo "Skipping bundled file: $file"
+              continue
+            fi
+
             if [ -f "$SKILL_PATH/$file" ]; then
               # Flatten directory structure for release assets
               cp "$SKILL_PATH/$file" "release-assets/$(basename "$file")"

constants.ts

@@ -1,6 +1,6 @@
 // ClawSec Suite SKILL.md URL - injected at build time, with hardcoded fallback
 export const SKILL_URL = import.meta.env.VITE_CLAWSEC_SUITE_URL || 
-  'https://clawsec.prompt.security/releases/download/clawsec-suite-v0.0.5/clawsec-suite.skill';
+  'https://clawsec.prompt.security/releases/download/clawsec-suite-v0.0.1/SKILL.md';
 
 // Feed URL for fetching live advisories
 export const ADVISORY_FEED_URL = 'https://clawsec.prompt.security/releases/latest/download/feed.json';

pages/Home.tsx

@@ -21,7 +21,7 @@ export const Home: React.FC = () => {
     return () => clearInterval(interval);
   }, []);
 
-  const humanInstruction = `Read ${SKILL_URL} and follow the instructions to install the protection skill suite.`;
+  const humanInstruction = `Read ${SKILL_URL} and follow the instructions to install this skill. all checksums verified with source`;
 
   const handleCopyCurl = () => {
     navigator.clipboard.writeText(curlCommand);