forgejo-label-manager.md:
- Refactored curl permission rules to use explicit allow/deny ordering with
clear comments explaining each rule; consolidated overlapping deny patterns
- Switched to curl-only approach via forgejo-api skill (deny all Forgejo MCP tools)
- Added read: deny and skill forgejo-api: allow to enforce the curl-only model
- Clarified permission block structure: deny by default, specific allows per endpoint
pr-merge-pool-supervisor.md:
- Expanded 'What You Receive' section to list each field individually with bold
labels for clarity (owner, repo, PAT, git email/name, briefing)
product-builder.md:
- Added 'Local Variable' column to the Required Information table so agents know
the canonical variable names to reuse throughout prompts
- Added forgejo_url, forgejo_owner, and forgejo_repo as explicit gather targets
with env var fallbacks and remote-detection instructions
- Added concrete remote URL parsing example showing how to extract host/owner/repo
freemo
b82148ab6c