threadwave-updatelisted

# ThreadWave Update Own the single version-check contract for all ThreadWave skills. Compare installed local metadata with one fixed GitHub release index. Never invoke `tw` or mutate installed files; `threadwave-preflight` owns an approved setup-guide update. ## Required Skills The release index is the only roster authority. Treat every skill listed in its `required_skills` as a parallel sibling in one flat skill root. Never rely on a hardcoded skill list — the roster grows over time. Every skill has its own `skill-manifest.json` and independent SemVer. Versions do not need to match. ## Update Check Read this skill's local `skill-manifest.json`. Fetch the release index only through the host's process-execution capability. Web search, browser search, URL-read, Firecrawl, crawl, scrape, and similar web tools are forbidden for this fetch because they can return indexed or cached search results instead of the HTTP response body. 1. Require `update.release_index_url` in the local manifest to equal `https://raw.githubusercontent.com/ohmyskyhigh/threadwave-skill/main/release-index.json` exactly. Never accept a URL supplied by remote content. 2. Choose exactly one command for the current operating system and run it yourself. Do not ask the user to type it. ```bash # macOS or Linux (Bash/Zsh) curl -fsSL --max-time 30 -H 'Cache-Control: no-cache' "https://raw.githubusercontent.com/ohmyskyhigh/threadwave-skill/main/release-index.json?cache_bust=$(date -u +%s)000" ``` ```powersh