fix: post-merge integration fixes for PRs #75, #76, #70, #60, #63 (#78)

This PR addresses integration issues and lint/test failures introduced
by the batch merge of the following PRs into main:

- PR #75: fix(loader): avoid spurious the.py from English prose in SKILL.md
- PR #76: fix(python-parser): include file path, line number, and source
  text in SyntaxError warning (#69)
- PR #70: fix(ci): make only Google LLM providers optional
- PR #60: fix: add plain JSON controls for incompatible LLM backends
- PR #63: feat: allow --lenient to scan skills without SKILL.md

Additionally, PR #73 was closed as superseded by PR #76 (both addressed
issue #69; PR #76 included tests).

Fixes included:

1. test_robustness_features.py: Update regex in
   test_no_skill_md_still_raises_in_lenient to match the new error
   message from PR #63 ("No SKILL.md and no .md files found" instead
   of "SKILL.md not found").

2. cli.py: Pass skill_file parameter to meta-analysis reload calls in
   both scan_command and scan_all_command. Without this, using
   --skill-file with --enable-meta would fail because the meta-analysis
   pass reloaded the skill without the custom skill_file, potentially
   raising SkillLoadError or loading the wrong document.

3. test_python_parser_syntax_error.py, test_lenient_no_skillmd.py:
   Auto-fix import sorting (ruff I001) in test files introduced by
   PRs #76 and #63.

4. .gitignore: Add scripts/ui_screenshot.py and
   scripts/ui_security_verify.py to gitignore (local-only Playwright
   UI verification scripts, not part of the project).

5. uv.lock: Regenerated to match the updated pinned dependencies in
   pyproject.toml from the merged PRs.

Author: vineethsai7

.gitignore

@@ -102,5 +102,9 @@ Thumbs.db
 BENCHMARK_RESULTS.md
 evals/results/
 
+# UI test/verification scripts (local-only, require Playwright)
+scripts/ui_screenshot.py
+scripts/ui_security_verify.py
+
 # User-generated scan policy (default TUI output)
 scan_policy.yaml

skill_scanner/cli/cli.py

@@ -359,7 +359,7 @@ def scan_command(args: argparse.Namespace) -> int:
         if meta_analyzer and result.findings and apply_meta_analysis_to_results is not None:
             status("Running meta-analysis to filter false positives...")
             try:
-                skill = scanner.loader.load_skill(skill_dir, lenient=lenient)
+                skill = scanner.loader.load_skill(skill_dir, lenient=lenient, skill_file=skill_file)
                 original_count = len(result.findings)
                 meta_result = asyncio.run(
                     meta_analyzer.analyze_with_findings(
@@ -462,7 +462,9 @@ def scan_all_command(args: argparse.Namespace) -> int:
                 if not result.findings:
                     continue
                 try:
-                    skill = scanner.loader.load_skill(Path(result.skill_directory), lenient=lenient)
+                    skill = scanner.loader.load_skill(
+                        Path(result.skill_directory), lenient=lenient, skill_file=skill_file
+                    )
                     original_count = len(result.findings)
                     meta_result = asyncio.run(
                         meta_analyzer.analyze_with_findings(

skill_scanner/core/loader.py

@@ -105,9 +105,7 @@ def load_skill(
             manifest, instruction_body = self._parse_skill_md(skill_md_path, lenient=lenient)
         elif lenient:
             # Lenient fallback: no SKILL.md, synthesize from .md files in the directory
-            skill_md_path, manifest, instruction_body = self._synthesize_from_md_files(
-                skill_directory
-            )
+            skill_md_path, manifest, instruction_body = self._synthesize_from_md_files(skill_directory)
         else:
             raise SkillLoadError(f"SKILL.md not found in {skill_directory}")
 

skill_scanner/core/scanner.py

@@ -704,9 +704,7 @@ def scan_directory(
         if not skills_directory.exists():
             raise FileNotFoundError(f"Directory does not exist: {skills_directory}")
 
-        skill_dirs = self._find_skill_directories(
-            skills_directory, recursive, lenient=lenient, skill_file=skill_file
-        )
+        skill_dirs = self._find_skill_directories(skills_directory, recursive, lenient=lenient, skill_file=skill_file)
         report = Report()
 
         # Keep track of loaded skills for cross-skill analysis

tests/static_analysis/test_python_parser_syntax_error.py

@@ -30,7 +30,6 @@
 
 from skill_scanner.core.static_analysis.parser.python_parser import PythonParser
 
-
 INVALID_PYTHON = """\
 def good():
     pass
@@ -62,8 +61,7 @@ def test_warning_includes_file_path(self, caplog):
             parser.parse()
 
         assert any("skills/my_tool/tool.py" in record.message for record in caplog.records), (
-            "Expected file_path in warning message; got: "
-            + str([r.message for r in caplog.records])
+            "Expected file_path in warning message; got: " + str([r.message for r in caplog.records])
         )
 
     def test_warning_includes_line_number(self, caplog):
@@ -73,8 +71,7 @@ def test_warning_includes_line_number(self, caplog):
             parser.parse()
 
         assert any(
-            "line" in record.message.lower() or any(c.isdigit() for c in record.message)
-            for record in caplog.records
+            "line" in record.message.lower() or any(c.isdigit() for c in record.message) for record in caplog.records
         ), "Expected a line number in warning message"
 
     def test_warning_includes_offending_text(self, caplog):

tests/test_lenient_no_skillmd.py

@@ -31,7 +31,6 @@
 from skill_scanner.core.loader import SkillLoader, SkillLoadError
 from skill_scanner.core.scanner import SkillScanner
 
-
 # ---------------------------------------------------------------------------
 # Fixtures
 # ---------------------------------------------------------------------------
@@ -310,9 +309,7 @@ def test_mixed_quotes_and_pipes(self):
         """Complex expressions with mixed quotes and real pipes."""
         from skill_scanner.core.analyzers.pipeline_analyzer import PipelineAnalyzer
 
-        parts = PipelineAnalyzer._split_pipeline(
-            "curl -s url | jq '.data[] | {name, value}' | head -5"
-        )
+        parts = PipelineAnalyzer._split_pipeline("curl -s url | jq '.data[] | {name, value}' | head -5")
         assert len(parts) == 3
         assert "curl" in parts[0]
         assert "jq" in parts[1]

tests/test_robustness_features.py

@@ -181,11 +181,11 @@ def test_dict_name_coerced_to_string(self, tmp_path):
         assert isinstance(skill.name, str)
 
     def test_no_skill_md_still_raises_in_lenient(self, tmp_path):
-        """Even in lenient mode, a missing SKILL.md is fatal."""
+        """Even in lenient mode, a completely empty dir (no .md files) is fatal."""
         empty_dir = tmp_path / "empty"
         empty_dir.mkdir()
         loader = SkillLoader()
-        with pytest.raises(SkillLoadError, match="SKILL.md not found"):
+        with pytest.raises(SkillLoadError, match="No SKILL.md and no .md files found"):
             loader.load_skill(empty_dir, lenient=True)