feat: /skills slash command lists and filters available Hermes skills

[nesquena-hermes]

Summary

Adds a /skills [query] slash command that lists available Hermes skills from the sidebar panel, directly in the chat.

What it does

/skills — lists all available skills grouped by category, formatted as an assistant message
/skills docker — filters by name, description, or category (case-insensitive)

Output format:

Available skills (42):

**devops**
  `background-checkpoint-worker` — Set up a background checkpoint review...
  `cron-digest-pattern` — Design pattern for cron-based activity digests...

**github**
  `github-issues` — Create, manage, triage, and close GitHub issues...

Changes

static/commands.js

• Added /skills to COMMANDS array with arg:'query' (shows in autocomplete)
• New async function cmdSkills(args): fetches /api/skills, optionally filters, groups by category, renders as assistant message

static/i18n.js

• Added cmd_skills key to en, de, zh, zh-Hant locales

tests/test_regressions.py

• Added test_skills_slash_command_defined(): verifies COMMANDS entry, function definition, and i18n key wiring

Tests

624 passed, 0 failed, 0 skipped

Fixes #248

[nesquena]

Full Review: PR #257 — /skills slash command

Security Audit

Clean. The /skills command fetches from the existing /api/skills endpoint (read-only, same-origin). Skill names and descriptions are inserted into the assistant message via template literals that go through renderMd() — the esc() in inlineMd() handles any special characters. No new endpoints, no user input sent to the server.

Code Review

cmdSkills() in commands.js:

• Fetches /api/skills, optionally filters by query (name, description, category substring match — case-insensitive)
• Groups results by category, formats as markdown with code-fenced skill names and truncated descriptions (80 chars)
• Pushes as an assistant message and renders — consistent with how /help and other info commands work
• Empty results handled gracefully with distinct messages for filtered vs unfiltered

The implementation is clean and follows the existing command pattern exactly.

i18n: cmd_skills key added to all 4 locales. Correct.

Regression test: Verifies name:'skills' in COMMANDS array, cmdSkills function defined, and cmd_skills i18n key referenced. Good.

Stacked Branch

This includes both #255 (config.py) and #256 (mobile fixes). Merge order: #255 → #256 → #257, with rebases after each.

One note

The skill description truncation (s.description.slice(0,80)) doesn't handle multi-byte characters gracefully — a CJK description could be cut mid-character. In practice this is cosmetic (the ... suffix makes it clear it's truncated), but substring with a word-boundary check would be slightly more polished. Not a blocker.

Tests

575 passed, 0 failed.

Verdict

Approved. Clean feature addition following established patterns. Ready to merge after #255 and #256.

[nesquena-hermes]

Agent review — APPROVED ✅ (merged to stage)

/skills command is cleanly implemented: fetches from /api/skills, groups by category with alphabetical sort, filters on name/description/category when a query arg is provided, renders as a formatted assistant message with bold category headers and inline-code skill names. Error handling via showToast. i18n key cmd_skills added to all 4 locales (en, de, zh, zh-Hant). The command shows up in the / autocomplete dropdown.

Regression test in test_regressions.py verifies COMMANDS entry, function definition, and i18n wiring.

Tests: 626 passed (+1 regression test) on review branch. Stage total: 645 passed, 0 failed.
Merged to stage branch.

[nesquena-hermes]

Merged to master via stage branch in PR #258 (v0.47.0).