⚠ SAFETY-02 allowed-tools least-privilege SKILL.md:1— → grants unrestricted shell access`allowed-tools` grants unrestricted `Bash` — scope it to specific commands.Bash Fix Replace bare `Bash` with scoped grants, e.g. `Bash(git status)`, `Bash(npm test)`.
⚠ VERIFY-01 Evals or tests present SKILL.md:298the skill can be verified → a prose verification step, but no runnable evals/ or tests/Manual verification only — add eval prompts with expected outcomes to make it checkable.# Verify Fix Add an evals/ folder with 2–3 test prompts and the expected assertions.