Source: gishamer/skill-ui License: MIT Runtime state: ACTIVE_BOUNDED

Allowed: list/read/validate/scaffold skills, dry-run mirrors, inspect metadata, prepare governed install/update proposals. Denied: publishing, repository writes, dependency installation, or overwriting skills without explicit approval and evidence. Prefer JSON output for agent-safe automation. Boundary: DISCOVERY != INSTALL; VALIDATED != TRUSTED; INSTALLED != AUTHORIZED; PUBLISHED requires approval.