[GenRamzi]

Summary

• add versioned skillconform.capabilities/v1 inventory
• expose inventory through CLI and TypeScript API
• detect declared tools, local references, bundled scripts, network hosts, shell/network capability signals, and portability notes
• add inventory tests
• extend the GitHub Action with inventory mode
• move the project to the 0.2.0 foundation and document the SkillConform 2 direction

Positioning

This intentionally complements specialist scanners such as NVIDIA SkillSpector rather than trying to duplicate their full security rule catalog. The next milestones are explicit compatibility profiles and behavioral regression testing.

Validation expected

npm run check, npm test, npm run test:self, self-audit, and package dry-run through the existing CI matrix.