{
  "schema_version": "0.1",
  "purpose": "Reviewed metadata corrections for package-facing skills whose imported frontmatter is missing, misleading, or too weak for safe catalog routing.",
  "review_boundary": "metadata_only_no_third_party_content_mutation",
  "updated_at": "2026-07-22",
  "overrides": [
    {
      "name": "Building Ransomware Playbook with CISA Framework",
      "domain": "security-defensive",
      "risk_level": "high",
      "requires_review": true,
      "artifact_kind": "playbook",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "environment_review_required",
      "classification_evidence": "Defensive ransomware preparation, containment, recovery, credential-reset, and external-response guidance requires environment-specific authority and review."
    },
    {
      "name": "Building SOC Escalation Matrix",
      "domain": "security-defensive",
      "risk_level": "medium",
      "requires_review": false,
      "artifact_kind": "playbook",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Defensive incident-routing and responsibility procedure; no automatic mutation is implied by classification alone."
    },
    {
      "name": "Building SOC Metrics and KPI Tracking",
      "domain": "security-defensive",
      "risk_level": "medium",
      "requires_review": false,
      "artifact_kind": "playbook",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Security-operations measurement may expose incident and personnel data but is primarily an analytical governance workflow."
    },
    {
      "name": "Building SOC Playbook for Ransomware",
      "domain": "security-defensive",
      "risk_level": "high",
      "requires_review": true,
      "artifact_kind": "playbook",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "environment_review_required",
      "classification_evidence": "Operational ransomware response can isolate systems, reset credentials, block indicators, and affect production recovery."
    },
    {
      "name": "Building Threat Actor Profile from OSINT",
      "domain": "research",
      "risk_level": "medium",
      "requires_review": true,
      "artifact_kind": "workflow",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "privacy_and_attribution_review_required",
      "classification_evidence": "External-source correlation can create attribution, privacy, and false-positive risks even when using public information."
    },
    {
      "name": "Building Threat Intelligence Enrichment in Splunk",
      "domain": "security-defensive",
      "risk_level": "high",
      "requires_review": true,
      "artifact_kind": "workflow",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "connector_and_data_review_required",
      "classification_evidence": "Touches production SIEM configuration, external intelligence sources, indicators, credentials, and potentially sensitive event data."
    },
    {
      "name": "Building Threat Intelligence Feed Integration",
      "domain": "security-defensive",
      "risk_level": "high",
      "requires_review": true,
      "artifact_kind": "workflow",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "connector_and_data_review_required",
      "classification_evidence": "Feed ingestion and automated indicator handling require source trust, privacy, rate-limit, credential, and rollback review."
    },
    {
      "name": "Code Documentation Generator",
      "domain": "software-engineering",
      "risk_level": "low",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Read-oriented code documentation procedure with no necessary production mutation."
    },
    {
      "name": "Coercing Authentication with Coercer and PetitPotam",
      "domain": "security-offensive",
      "risk_level": "high",
      "requires_review": true,
      "artifact_kind": "runbook",
      "target_surfaces": ["skills"],
      "source_status": "classification_reviewed",
      "review_status": "authorized_lab_only",
      "classification_evidence": "Explicit credential-coercion and offensive authentication testing procedure."
    },
    {
      "name": "Collecting Open-Source Intelligence",
      "domain": "research",
      "risk_level": "medium",
      "requires_review": true,
      "artifact_kind": "workflow",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "privacy_and_source_review_required",
      "classification_evidence": "Public-source collection can still implicate privacy, attribution, terms-of-service, and data-retention boundaries."
    },
    {
      "name": "Collecting Threat Intelligence with MISP",
      "domain": "security-defensive",
      "risk_level": "high",
      "requires_review": true,
      "artifact_kind": "workflow",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "connector_and_sharing_review_required",
      "classification_evidence": "MISP collection and sharing involve credentials, external systems, potentially sensitive indicators, and publication scope."
    },
    {
      "name": "Command Basics",
      "domain": "agent-operations",
      "risk_level": "low",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Foundational agent-command authoring guidance."
    },
    {
      "name": "Command Development",
      "domain": "agent-operations",
      "risk_level": "medium",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Command implementation may route tools or mutate repositories but remains an agent-operation authoring procedure."
    },
    {
      "name": "Command Dynamic Features",
      "domain": "agent-operations",
      "risk_level": "medium",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Dynamic command behavior affects routing and runtime execution boundaries."
    },
    {
      "name": "Command Frontmatter",
      "domain": "agent-operations",
      "risk_level": "low",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Declarative command metadata procedure."
    },
    {
      "name": "Command Organization",
      "domain": "agent-operations",
      "risk_level": "low",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Command taxonomy and organization procedure."
    },
    {
      "name": "Command Plugin Integration",
      "domain": "runtime-tools",
      "risk_level": "high",
      "requires_review": true,
      "artifact_kind": "workflow",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "runtime_and_permission_review_required",
      "classification_evidence": "Plugin integration can introduce executable dependencies, tool authority, credentials, and external effects."
    },
    {
      "name": "Completion Contract Loop",
      "domain": "agent-operations",
      "risk_level": "low",
      "requires_review": false,
      "artifact_kind": "workflow",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Verification and stopping-condition loop for agent work."
    },
    {
      "name": "Creative Ideation — Constraint-Driven Project Generation",
      "domain": "design",
      "risk_level": "low",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "design-system", "click-blue"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Constraint-driven creative ideation procedure."
    },
    {
      "name": "Data Storytelling",
      "domain": "design",
      "risk_level": "low",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "design-system", "click-blue"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Communication and visual narrative procedure for data."
    },
    {
      "name": "Database Backup & Disaster Recovery",
      "domain": "software-engineering",
      "risk_level": "high",
      "requires_review": true,
      "artifact_kind": "runbook",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "production_and_data_review_required",
      "classification_evidence": "Backup, restore, failover, retention, and destructive recovery operations affect production data."
    },
    {
      "name": "Doc Co-Authoring Workflow",
      "domain": "writing",
      "risk_level": "low",
      "requires_review": false,
      "artifact_kind": "workflow",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Collaborative document authoring and review workflow."
    },
    {
      "name": "Environment Manager",
      "domain": "runtime-tools",
      "risk_level": "high",
      "requires_review": true,
      "artifact_kind": "workflow",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "filesystem_credentials_and_runtime_review_required",
      "classification_evidence": "Environment management can alter configuration, dependencies, secrets, and execution context."
    },
    {
      "name": "Fresh Clone Loop",
      "domain": "agent-operations",
      "risk_level": "medium",
      "requires_review": false,
      "artifact_kind": "workflow",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Repository-state verification loop using a clean checkout."
    },
    {
      "name": "Hook Basics",
      "domain": "agent-operations",
      "risk_level": "medium",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Agent/runtime hook concepts affect execution timing and authority."
    },
    {
      "name": "Hook Debugging",
      "domain": "software-engineering",
      "risk_level": "medium",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Debugging procedure for executable hooks and runtime events."
    },
    {
      "name": "Hook Development",
      "domain": "runtime-tools",
      "risk_level": "high",
      "requires_review": true,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "runtime_and_permission_review_required",
      "classification_evidence": "Developing executable hooks can invoke tools, mutate files, and intercept runtime events."
    },
    {
      "name": "Hook Events",
      "domain": "agent-operations",
      "risk_level": "medium",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Runtime event-routing and lifecycle guidance."
    },
    {
      "name": "Hook Security",
      "domain": "security-defensive",
      "risk_level": "high",
      "requires_review": true,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "runtime_and_permission_review_required",
      "classification_evidence": "Security controls for executable hooks necessarily inspect runtime authority and potentially sensitive configuration."
    },
    {
      "name": "Planning with Files",
      "domain": "agent-operations",
      "risk_level": "low",
      "requires_review": false,
      "artifact_kind": "workflow",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "File-backed planning and continuity procedure."
    },
    {
      "name": "Project Skill Audit",
      "domain": "agent-operations",
      "risk_level": "low",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Read-oriented audit of project skill coverage and quality."
    },
    {
      "name": "Prompt Injection Detection",
      "domain": "security-defensive",
      "risk_level": "medium",
      "requires_review": true,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "detection_limitations_review_required",
      "classification_evidence": "Security detection procedure whose false-positive and false-negative limits must remain explicit."
    },
    {
      "name": "Python Anti-Patterns Checklist",
      "domain": "software-engineering",
      "risk_level": "low",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Static code-quality review checklist."
    },
    {
      "name": "Python Packaging",
      "domain": "software-engineering",
      "risk_level": "medium",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Packaging can modify dependencies and publication artifacts but is a standard engineering procedure."
    },
    {
      "name": "Python Resilience Patterns",
      "domain": "software-engineering",
      "risk_level": "low",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Defensive software-design patterns for retries, timeouts, and failure handling."
    },
    {
      "name": "Resolving Merge Conflicts",
      "domain": "software-engineering",
      "risk_level": "medium",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Repository mutation procedure requiring diff review and tests."
    },
    {
      "name": "SLO Implementation",
      "domain": "software-engineering",
      "risk_level": "medium",
      "requires_review": false,
      "artifact_kind": "workflow",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Reliability engineering procedure spanning indicators, objectives, alerting, and operational policy."
    },
    {
      "name": "SQL Optimization Patterns",
      "domain": "software-engineering",
      "risk_level": "medium",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Database performance procedure; production application still requires query-plan and data-safety review."
    },
    {
      "name": "SaaS Revenue Operations",
      "domain": "business",
      "risk_level": "medium",
      "requires_review": false,
      "artifact_kind": "playbook",
      "target_surfaces": ["skills", "click-blue", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Commercial pipeline, forecasting, and revenue-operations procedure."
    },
    {
      "name": "Schema Versioning",
      "domain": "software-engineering",
      "risk_level": "medium",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "API/data compatibility and migration procedure."
    },
    {
      "name": "Scientific Visualization",
      "domain": "research",
      "risk_level": "medium",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "design-system", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Research visualization procedure where misleading encodings and unsupported inference are the primary risks."
    },
    {
      "name": "Sentry Observability (Read-only)",
      "domain": "runtime-tools",
      "risk_level": "medium",
      "requires_review": true,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "credential_and_private_data_review_required",
      "classification_evidence": "Read-only observability still requires credentials and can expose production traces, users, and secrets."
    },
    {
      "name": "Skill Structure",
      "domain": "agent-operations",
      "risk_level": "low",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Skill-authoring structure guidance."
    },
    {
      "name": "Skill Validation Checklist",
      "domain": "agent-operations",
      "risk_level": "low",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Read-oriented quality and safety checklist for skills."
    },
    {
      "name": "Systematic Performance Profiling",
      "domain": "software-engineering",
      "risk_level": "medium",
      "requires_review": false,
      "artifact_kind": "workflow",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Measurement-first performance engineering workflow."
    },
    {
      "name": "Teaching Workspace",
      "domain": "agent-operations",
      "risk_level": "low",
      "requires_review": false,
      "artifact_kind": "workflow",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Workspace explanation and onboarding procedure."
    },
    {
      "name": "algorithmic-art",
      "domain": "design",
      "risk_level": "medium",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "design-system", "click-blue"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Code-assisted visual generation procedure."
    },
    {
      "name": "apple-macos-apps",
      "domain": "software-engineering",
      "risk_level": "medium",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "macOS application engineering procedure."
    },
    {
      "name": "auth-implementation-patterns",
      "domain": "software-engineering",
      "risk_level": "high",
      "requires_review": true,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "identity_and_credential_review_required",
      "classification_evidence": "Authentication implementation handles credentials, sessions, identity boundaries, and security-sensitive configuration."
    },
    {
      "name": "benchmark",
      "domain": "research",
      "risk_level": "medium",
      "requires_review": false,
      "artifact_kind": "workflow",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Controlled evaluation and comparative measurement workflow."
    },
    {
      "name": "benchmark-models",
      "domain": "research",
      "risk_level": "medium",
      "requires_review": false,
      "artifact_kind": "workflow",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Model evaluation workflow with cost, data, and interpretation boundaries."
    },
    {
      "name": "browser-testing-with-devtools",
      "domain": "software-engineering",
      "risk_level": "medium",
      "requires_review": true,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "browser_and_data_review_required",
      "classification_evidence": "Browser testing can access authenticated pages, private application state, and external systems."
    },
    {
      "name": "build-mcp-app",
      "domain": "runtime-tools",
      "risk_level": "high",
      "requires_review": true,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "tool_authority_review_required",
      "classification_evidence": "MCP applications expose executable tools and authority boundaries to agents."
    },
    {
      "name": "build-mcp-server",
      "domain": "runtime-tools",
      "risk_level": "high",
      "requires_review": true,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "tool_authority_review_required",
      "classification_evidence": "MCP servers expose executable tools, data, network access, and credentials."
    },
    {
      "name": "build-mcpb",
      "domain": "runtime-tools",
      "risk_level": "high",
      "requires_review": true,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "packaging_and_execution_review_required",
      "classification_evidence": "Executable MCP bundle packaging requires dependency, script, provenance, and authority review."
    },
    {
      "name": "c4-architecture",
      "domain": "software-engineering",
      "risk_level": "low",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Read-oriented architecture modeling procedure."
    },
    {
      "name": "canvas-design",
      "domain": "design",
      "risk_level": "low",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "design-system", "click-blue"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Visual composition and canvas-design procedure."
    },
    {
      "name": "change-management",
      "domain": "business",
      "risk_level": "low",
      "requires_review": false,
      "artifact_kind": "playbook",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Organizational change planning and communication procedure."
    },
    {
      "name": "changelog-generator",
      "domain": "writing",
      "risk_level": "low",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Repository-history synthesis into release notes."
    },
    {
      "name": "chaos-engineering",
      "domain": "software-engineering",
      "risk_level": "high",
      "requires_review": true,
      "artifact_kind": "runbook",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "production_change_review_required",
      "classification_evidence": "Fault injection can intentionally disrupt production or shared infrastructure."
    },
    {
      "name": "competitive-intel",
      "domain": "business",
      "risk_level": "medium",
      "requires_review": true,
      "artifact_kind": "workflow",
      "target_surfaces": ["skills", "click-blue", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "source_terms_and_attribution_review_required",
      "classification_evidence": "External market and competitor research requires source quality, terms, privacy, and inference controls."
    },
    {
      "name": "diagrams-charts",
      "domain": "design",
      "risk_level": "low",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "design-system", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Diagram and chart composition procedure."
    },
    {
      "name": "document-generate",
      "domain": "writing",
      "risk_level": "medium",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Document generation can write artifacts but is not inherently externally mutating."
    },
    {
      "name": "document-release",
      "domain": "writing",
      "risk_level": "medium",
      "requires_review": true,
      "artifact_kind": "workflow",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "publication_review_required",
      "classification_evidence": "Document release can publish externally and requires final-content, destination, and authority review."
    },
    {
      "name": "docx",
      "domain": "writing",
      "risk_level": "medium",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Document artifact creation and editing procedure."
    },
    {
      "name": "dossier",
      "domain": "writing",
      "risk_level": "low",
      "requires_review": false,
      "artifact_kind": "workflow",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Structured evidence and narrative compilation procedure."
    },
    {
      "name": "edit-article",
      "domain": "writing",
      "risk_level": "low",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "click-blue"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Article editing and quality-improvement procedure."
    },
    {
      "name": "faceless-explainer",
      "domain": "media",
      "risk_level": "medium",
      "requires_review": false,
      "artifact_kind": "workflow",
      "target_surfaces": ["skills", "click-blue", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Media-production workflow for narrated explainer content."
    },
    {
      "name": "frontend-design",
      "domain": "design",
      "risk_level": "medium",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "design-system", "click-blue"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Interface design procedure spanning visual and implementation decisions."
    },
    {
      "name": "frontend-ui-engineering",
      "domain": "design",
      "risk_level": "medium",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "design-system", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Interface engineering procedure with design-system and implementation concerns."
    },
    {
      "name": "general-video",
      "domain": "media",
      "risk_level": "medium",
      "requires_review": false,
      "artifact_kind": "workflow",
      "target_surfaces": ["skills", "click-blue", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "General video planning and production workflow."
    },
    {
      "name": "hyperframes",
      "domain": "media",
      "risk_level": "medium",
      "requires_review": false,
      "artifact_kind": "skill-suite",
      "target_surfaces": ["skills", "click-blue", "workframe", "design-system"],
      "source_status": "classification_reviewed",
      "review_status": "runtime_adapter_pending",
      "classification_evidence": "HTML-native deterministic video authoring suite; media workflow with runtime integration requirements."
    },
    {
      "name": "hyperframes-animation",
      "domain": "media",
      "risk_level": "medium",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "design-system", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "runtime_adapter_pending",
      "classification_evidence": "Deterministic animation procedure for programmatic video."
    },
    {
      "name": "hyperframes-cli",
      "domain": "runtime-tools",
      "risk_level": "high",
      "requires_review": true,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "command_execution_review_required",
      "classification_evidence": "CLI workflow can install dependencies, read assets, and render executable media pipelines."
    },
    {
      "name": "hyperframes-core",
      "domain": "media",
      "risk_level": "medium",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "workframe", "design-system"],
      "source_status": "classification_reviewed",
      "review_status": "runtime_adapter_pending",
      "classification_evidence": "Core deterministic composition concepts for HTML-native video."
    },
    {
      "name": "hyperframes-creative",
      "domain": "media",
      "risk_level": "medium",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "click-blue", "design-system"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Creative direction and composition patterns for programmatic video."
    },
    {
      "name": "hyperframes-media",
      "domain": "media",
      "risk_level": "high",
      "requires_review": true,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "click-blue", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "external_media_service_review_required",
      "classification_evidence": "Media preprocessing may invoke transcription, speech, background-removal, or other external services."
    },
    {
      "name": "hyperframes-registry",
      "domain": "runtime-tools",
      "risk_level": "high",
      "requires_review": true,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "dependency_and_registry_review_required",
      "classification_evidence": "Registry use can download executable dependencies and third-party assets."
    },
    {
      "name": "image-generation",
      "domain": "design",
      "risk_level": "medium",
      "requires_review": true,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "design-system", "click-blue"],
      "source_status": "classification_reviewed",
      "review_status": "provider_rights_and_content_review_required",
      "classification_evidence": "Image generation invokes external models or local runtimes and requires rights, privacy, and content review."
    },
    {
      "name": "landing-report",
      "domain": "business",
      "risk_level": "low",
      "requires_review": false,
      "artifact_kind": "workflow",
      "target_surfaces": ["skills", "click-blue"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Commercial landing-page findings and recommendation report."
    },
    {
      "name": "litreview",
      "domain": "research",
      "risk_level": "low",
      "requires_review": false,
      "artifact_kind": "workflow",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Literature search, evaluation, and synthesis workflow."
    },
    {
      "name": "make-pdf",
      "domain": "writing",
      "risk_level": "medium",
      "requires_review": false,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "PDF artifact generation and verification procedure."
    },
    {
      "name": "media-use",
      "domain": "media",
      "risk_level": "medium",
      "requires_review": true,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "click-blue", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "rights_and_private_media_review_required",
      "classification_evidence": "Media ingestion and transformation may expose private assets and licensing constraints."
    },
    {
      "name": "meeting-intelligence",
      "domain": "business",
      "risk_level": "medium",
      "requires_review": true,
      "artifact_kind": "workflow",
      "target_surfaces": ["skills", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "private_data_and_consent_review_required",
      "classification_evidence": "Meeting analysis can process confidential communications, attendees, recordings, and action items."
    },
    {
      "name": "music-to-video",
      "domain": "media",
      "risk_level": "medium",
      "requires_review": true,
      "artifact_kind": "workflow",
      "target_surfaces": ["skills", "click-blue", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "rights_and_rendering_review_required",
      "classification_evidence": "Audio-to-video production requires asset rights and rendering/runtime review."
    },
    {
      "name": "newsletter-generation",
      "domain": "writing",
      "risk_level": "low",
      "requires_review": false,
      "artifact_kind": "workflow",
      "target_surfaces": ["skills", "click-blue"],
      "source_status": "classification_reviewed",
      "review_status": "metadata_reviewed",
      "classification_evidence": "Newsletter research and writing workflow; publication remains a separate authorized action."
    },
    {
      "name": "ai-seo",
      "domain": "business",
      "risk_level": "medium",
      "requires_review": true,
      "artifact_kind": "skill",
      "target_surfaces": ["skills", "click-blue", "workframe"],
      "source_status": "classification_reviewed",
      "review_status": "external_data_and_claims_review_required",
      "classification_evidence": "AI-search optimization depends on current external evidence and must separate measured visibility from speculative ranking claims."
    }
  ]
}