chore(deps): update mattpocock/skills digest to 068b6e0

skills/ask-matt/spec.yaml

@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/ask-matt"
-  version: "0.3.1"
+  version: "0.3.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"

skills/codebase-design/spec.yaml

@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/codebase-design"
-  version: "0.3.1"
+  version: "0.3.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"

skills/diagnosing-bugs/spec.yaml

@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/diagnosing-bugs"
-  version: "0.3.1"
+  version: "0.3.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"

skills/domain-modeling/spec.yaml

@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/domain-modeling"
-  version: "0.3.1"
+  version: "0.3.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"

skills/git-guardrails-claude-code/spec.yaml

@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/misc/git-guardrails-claude-code"
-  version: "0.4.1"
+  version: "0.4.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"

skills/grill-me/spec.yaml

@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/productivity/grill-me"
-  version: "0.4.1"
+  version: "0.4.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"

skills/grill-with-docs/spec.yaml

@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/grill-with-docs"
-  version: "0.4.1"
+  version: "0.4.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"

skills/grilling/spec.yaml

@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/productivity/grilling"
-  version: "0.4.1"
+  version: "0.4.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"

skills/handoff/spec.yaml

@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/productivity/handoff"
-  version: "0.3.1"
+  version: "0.3.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"

skills/implement/spec.yaml

@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/implement"
-  version: "0.3.1"
+  version: "0.3.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"

skills/improve-codebase-architecture/spec.yaml

@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/improve-codebase-architecture"
-  version: "0.4.1"
+  version: "0.4.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"
@@ -27,3 +27,7 @@ security:
     # the official Tailwind and Mermaid CDNs and no user data is transmitted anywhere.
     - rule_id: PG_EXFIL_HTML_TAG
       reason: "FP: scanner matched the Tailwind CDN <script> tag in HTML-REPORT.md's static report scaffold; a script include from the official CDN in a local, self-contained report template, no data exfiltration."
+    - rule_id: LLM_PROMPT_INJECTION
+      reason: "Risk accepted by maintainer (danbarr, 2026-08-25): SKILL.md instructs the agent to read and incorporate CONTEXT.md and ADR files from docs/adr/ into its architectural analysis. These are project-local files the user already trusts and maintains; processing them is the skill's documented purpose (aligning suggestions with existing domain vocabulary and decisions). Same class of accepted risk as skills/hf-mcp and skills/huggingface-tool-builder."
+    - rule_id: LLM_PROMPT_INJECTION
+      reason: "Risk accepted by maintainer (danbarr, 2026-08-25): SKILL.md instructs the agent to run `git log --oneline` to find commit-history hot spots that guide where to focus analysis. Commit messages come from the project's own history, which the user already trusts; using them as a weighting signal is the skill's documented purpose, not processing of arbitrary external input."

skills/matt-pocock-code-review/spec.yaml

@@ -11,9 +11,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/code-review"
-  version: "0.3.1"
+  version: "0.3.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"

skills/migrate-to-shoehorn/spec.yaml

@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/misc/migrate-to-shoehorn"
-  version: "0.4.1"
+  version: "0.4.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"

skills/prototype/spec.yaml

@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/prototype"
-  version: "0.3.1"
+  version: "0.3.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"

skills/research/spec.yaml

@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/research"
-  version: "0.3.1"
+  version: "0.3.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"

skills/resolving-merge-conflicts/spec.yaml

@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/resolving-merge-conflicts"
-  version: "0.3.1"
+  version: "0.3.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"

skills/scaffold-exercises/spec.yaml

@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/misc/scaffold-exercises"
-  version: "0.4.1"
+  version: "0.4.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"

skills/setup-matt-pocock-skills/spec.yaml

@@ -10,9 +10,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/setup-matt-pocock-skills"
-  version: "0.4.1"
+  version: "0.4.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"

skills/setup-pre-commit/spec.yaml

@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/misc/setup-pre-commit"
-  version: "0.4.1"
+  version: "0.4.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"

skills/tdd/spec.yaml

@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/tdd"
-  version: "0.4.1"
+  version: "0.4.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"

skills/teach/spec.yaml

@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/productivity/teach"
-  version: "0.3.1"
+  version: "0.3.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"

skills/to-questionnaire/spec.yaml

@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/productivity/to-questionnaire"
-  version: "0.2.1"
+  version: "0.2.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"

skills/to-spec/spec.yaml

@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/to-spec"
-  version: "0.3.1"
+  version: "0.3.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"

skills/to-tickets/spec.yaml

@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/to-tickets"
-  version: "0.3.1"
+  version: "0.3.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"

skills/triage/spec.yaml

@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/triage"
-  version: "0.4.1"
+  version: "0.4.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"
@@ -21,3 +21,5 @@ security:
   allowed_issues:
     - rule_id: MANIFEST_MISSING_LICENSE
       reason: "mattpocock/skills is licensed MIT at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter."
+    - rule_id: ATR_2026_00051
+      reason: "FP: 'all files' matches OUT-OF-SCOPE.md's instruction to read all files in the project-local `.out-of-scope/` knowledge-base directory (OUT-OF-SCOPE.md:72), a scoped and bounded read, not an unbounded filesystem scan."

skills/wait-what/spec.yaml

@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/productivity/wait-what"
-  version: "0.1.1"
+  version: "0.1.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"

skills/wayfinder/spec.yaml

@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/wayfinder"
-  version: "0.3.1"
+  version: "0.3.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"

skills/wizard/spec.yaml

@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/wizard"
-  version: "0.2.1"
+  version: "0.2.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"
@@ -21,3 +21,9 @@ security:
   allowed_issues:
     - rule_id: MANIFEST_MISSING_LICENSE
       reason: "mattpocock/skills is licensed MIT at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter."
+    - rule_id: ATR_2026_00063
+      reason: "FP: scanner pattern-matches the literal string '.env' in SKILL.md prose describing the wizard's documented purpose - writing .env files during a human-run setup procedure - not a credential leak."
+    - rule_id: ATR_2026_01610
+      reason: "FP: 'bash -n <script>' is the standard non-executing syntax-check flag, used in the skill's own verification step before handing a generated script to the human."
+    - rule_id: ATR_2026_00064
+      reason: "FP: 'chmod +x' makes the skill's generated wizard script executable for the human to run, as documented in the hand-off step; not a privilege-escalation payload."

skills/writing-for-agents/spec.yaml

@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/productivity/writing-for-agents"
-  version: "0.2.1"
+  version: "0.2.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"