feat(skills): add 5 skills from entireio/skills

[samuv]

Summary

Add packaging specs for all 5 skills shipped by entireio/skills (MIT-licensed), pinned to commit c376dc971045eb38c094802ca43875d1cfa00ea4 (main as of 2026-05-07) at dockyard version 0.1.0. Each spec follows the existing mattpocock/skills template (e.g. skills/tdd/spec.yaml).

These skills teach agents how to use the Entire CLI — searching prior checkpoints and sessions, explaining the intent behind code, and handing off in-flight work between agents.

Skills added

• Context lookup (3): entire-search, entire-explain, entire-what-happened
• Session lifecycle (2): entire-session-handoff, entire-session-to-skill

Each upstream name is prefixed with entire- in dockyard to avoid collisions with the generic terms (search, explain, …) and to keep provenance clear in the agent skill list. The upstream name: field inside each SKILL.md is left untouched.

Upstream coordination

skills/what-happened/SKILL.md originally declared name: What Happened (capitalized, with a space), which failed dockhand's slug validator (must be 2-64 lowercase alphanumeric characters or hyphens). Fixed upstream in entireio/skills#23; the pin in this PR includes that fix.

Note on entire-session-to-skill

session-to-skill is included even though its README section was removed upstream in entireio/skills#21: the skill directory still exists at the pinned commit and its SKILL.md is well-formed, so it ships alongside the others.

Allowlist

Each spec allowlists MANIFEST_MISSING_LICENSE with the same reason used for mattpocock/skills: entireio/skills carries its MIT license at the repository root rather than embedding an SPDX identifier in per-skill SKILL.md frontmatter.

Test plan

• CI validate-skills matrix passes for the 5 new configs.
• CI skill-security-scan passes; only MANIFEST_MISSING_LICENSE findings remain and are allowlisted.
• CI build-skill-artifacts (dry-run on PR) succeeds.

[github-actions]

🛡️ Skill Security Scan Results

✅ entire-explain

• Status: Passed
• Findings: 3
• Allowed (not blocking): 1
  • MANIFEST_MISSING_LICENSE (Allowed: entireio/skills is MIT-licensed at the repo root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)

✅ entire-search

• Status: Passed
• Findings: 3
• Allowed (not blocking): 1
  • MANIFEST_MISSING_LICENSE (Allowed: entireio/skills is MIT-licensed at the repo root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)

✅ entire-session-handoff

• Status: Passed
• Findings: 5
• Allowed (not blocking): 1
  • MANIFEST_MISSING_LICENSE (Allowed: entireio/skills is MIT-licensed at the repo root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter.)

✅ entire-session-to-skill

• Status: Passed
• Findings: 4

✅ entire-what-happened

• Status: Passed
• Findings: 4

---

Summary: Scanned 5 skill(s), all passed security checks. ✅