René's URL Explorer Experiment

Title: feat(copilot): gate user skills to explicit slash-attach by j15z · Pull Request #5536 · simstudioai/sim · GitHub

Open Graph Title: feat(copilot): gate user skills to explicit slash-attach by j15z · Pull Request #5536 · simstudioai/sim

X Title: feat(copilot): gate user skills to explicit slash-attach by j15z · Pull Request #5536 · simstudioai/sim

Description: Summary Stops the copilot from adopting a workspace user-skill as its own instructions unless the user explicitly slash-attaches it. A user-created skill whose description reads like a behavioral instruction (e.g. a "pirate" skill described as "respond like a pirate") was being obeyed by the copilot on ordinary messages. The skill's name + description sit in the always-on ## Skills block of the workspace context, and the model simply followed them — no tool call, no user request. The block's copy actively encouraged it: "call the load_user_skill tool … then follow them." This PR closes both paths: Removes the load_user_skill tool and its three payload callers (chat payload, mothership execute route, inbox executor), deleting lib/mothership/skills.ts. The copilot can no longer autonomously pull a user skill's full content into its own instructions. Reframes the inventory: ## Skills -> ## Agent Block Skills — NOT FOR YOU, with a one-line guardrail so a skill's description is not read as a command. User skills still reach the copilot as behavior — but only via an explicit /-attach, which routes through the separate ## Active Skills block ("treat as authoritative instructions"). Agent-block skills (load_skill) and manage_skill authoring are untouched. Also prunes dead load_user_skill references and the now-orphaned includeMothershipTools param (its only reader was the removed tool). No linked issue. Type of Change Bug fix New feature Breaking change Documentation Other: removes the load_user_skill copilot tool (intentional behavior change) Testing Unit tests — 36 passing across every touched file: payload.test.ts + post.test.ts — 16/16 (cover buildCopilotRequestPayload; confirm the removed includeMothershipTools was never load-bearing) workspace-context.test.ts, hidden-tools.test.ts, skills/operations.test.ts, skills-resolver.test.ts — 20/20 Static checks: tsc --noEmit clean for the feature; biome check clean on all changed files. Behavior verified against real mothership traces (the important evidence): Before — a brand-new chat where the user typed only "Good morning", with zero tool calls, still got a reply in pirate speak. The model obeyed the skill's description straight out of the always-on inventory (no load_user_skill call, no VFS read). After — the same skill is adopted only when explicitly slash-attached: the request carries a skill context item and the mothership injects it under ## Active Skills, which the model follows. A plain message no longer triggers it. Reviewers should focus on: workspace-context.ts — the NOT FOR YOU framing is a prompt-level guardrail, so its strength is empirical. It holds against the pirate repro; a deliberately adversarial skill description is the interesting edge case. The load_user_skill removal spans three payload callers — worth confirming none were missed (grep -r load_user_skill returns 0). tools/index.ts and log-details/utils.ts — the dead || 'load_user_skill' clauses were dropped while the still-live load_skill (agent-block) path is deliberately preserved. Checklist Code follows project style guidelines Self-reviewed my changes Tests added/updated and passing No new warnings introduced I confirm that I have read and agree to the terms outlined in the Contributor License Agreement (CLA) Screenshots/Videos No UI changes. The behavior is observable in the copilot's responses and in mothership traces rather than in the interface. 🤖 Generated with Claude Code

Open Graph Description: Summary Stops the copilot from adopting a workspace user-skill as its own instructions unless the user explicitly slash-attaches it. A user-created skill whose description reads like a behavioral i...

X Description: Summary Stops the copilot from adopting a workspace user-skill as its own instructions unless the user explicitly slash-attaches it. A user-created skill whose description reads like a behavioral i...

Opengraph URL: https://github.com/simstudioai/sim/pull/5536

X: @github

direct link

Domain: github.com

Links:

Viewport: width=device-width