[dotnet-port-fixes] Harden file skill discovery

[Michelle Clayton (michelle-clayton-work)]

Summary

Port the .NET file-skill discovery hardening from microsoft/agent-framework#7540 into the Go agent/skills/fsskills loader. The Go change now skips symlinked SKILL.md files, resources, and scripts during discovery while still allowing a caller-configured root path that is itself a symlink.

Ported .NET PRs

• .NET: Harden file skill discovery agent-framework#7540 - Harden file skill discovery (94bbfb2ac8382450219afd978bbe17b7eb44efbf)

Breaking Changes

No. Exported Go APIs are unchanged; the loader only rejects unsafe file-skill paths that previously could be followed through symlinks.

Tests and Examples

• Added parity tests for symlinked SKILL.md, resource, and script paths, plus configured-root symlink support
• Ran go test ./agent/skills/fsskills

Notes

• This PR keeps the scope to the file-skill symlink hardening that maps cleanly to the existing Go API surface.
• The existing Go discovery logic already continues past unreadable directories without aborting sibling skill discovery, so no additional API-safe change was needed there.
• Upstream commit: microsoft/agent-framework@94bbfb2

Generated by .NET to Go Fixes and Test Porting Agent · gpt54 · 215.2 AIC · ⌖ 13.2 AIC · ⊞ 24.2K · ◷

Closes #822

[Copilot]

Pull request overview

This PR ports the .NET “file-skill discovery hardening” behavior into the Go agent/skills/fsskills loader by adding symlink/inspection checks so discovery skips symlinked SKILL.md files, resources, and scripts while still allowing a caller-provided root that is itself a symlink.

Changes:

• Hardened skill directory discovery to avoid treating symlinked SKILL.md as a valid skill marker.
• Hardened resource/script discovery to skip symlinked (or uninspectable) entries during scan.
• Added tests covering symlinked SKILL.md, resources, scripts, and symlinked configured-root behavior.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 1 comment.

File	Description
agent/skills/fsskills/source.go	Adds symlink/inspection checks during skill, resource, and script discovery.
agent/skills/fsskills/source_test.go	Adds tests for symlinked SKILL.md, symlinked configured root, and symlinked resources.
agent/skills/fsskills/source_script_test.go	Adds a test ensuring symlinked scripts are skipped.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[github-actions]

Parity Review: ✅ Approved

This PR ports symlink-hardening from .NET PR microsoft/agent-framework#7540 into the Go agent/skills/fsskills loader.

Scope: Only agent/skills/fsskills/source.go (internal discovery logic) and tests are changed. No exported Go APIs are added, removed, or modified.

Upstream alignment: The Go change faithfully mirrors the .NET hardening — skip symlinked SKILL.md files, resources, and scripts during discovery while still allowing a caller-configured root that is itself a symlink. Semantics are consistent with upstream commit 94bbfb2.

Python parity: The Python SDK does not currently expose a file-system skill loader equivalent, so there is no Python surface to compare against.

No public-api-change label applied — exported API surface is unchanged.

Parity review complete. No cross-repo consistency issues found.

Generated by Go API Consistency Review Agent for #833 · sonnet46 · 14.8 AIC · ⌖ 5.61 AIC · ⊞ 5.7K · ◷