@@ -443,7 +443,7 @@ Known keybindings: `Ctrl+C` interrupts the in-flight run, and quits on a second
 
 ### Skills (`src/extensions/skills.ts`)
 
-Skills stay Markdown content, not packages. Skills are `.md` capability packages (`SKILL.md`) authored under `plugins/`, enabled plugins, or `.agents`/`.claude`/`.codex/skills`. There is **no** `@corbits/code-agent-*`/workspace skill package and no `skills/` workspace extraction in 0.3.36. Each skill is a **dual surface**: the model looks up descriptions with the advertised `skill_search` catalog tool, loads a body on demand via the `use_skill` core tool, and the operator can invoke it as `/<skill-name>` unless frontmatter sets `user-invocable: false`. The primary prompt lists names only. `loadSkillCommands` (`src/plugins/skill-commands.ts`) synthesizes a slash command that sends the SKILL.md body (plus typed args) to the primary session; untagged skills still become slashes.
+Skills stay Markdown content, not packages. There is **no** `@corbits/code-agent-*`/workspace skill package and no `skills/` workspace extraction in 0.3.36; skills are `.md` capability packages (`SKILL.md`) authored under `plugins/`, enabled plugins, or `.agents`/`.claude`/`.codex/skills`. Each skill is a **dual surface**: the model looks up descriptions with the advertised `skill_search` catalog tool, loads a body on demand via the `use_skill` core tool, and the operator can invoke it as `/<skill-name>` unless frontmatter sets `user-invocable: false`. The primary prompt lists names only. `loadSkillCommands` (`src/plugins/skill-commands.ts`) synthesizes a slash command that sends the SKILL.md body (plus typed args) to the primary session; untagged skills still become slashes.
 
 Corbits Code **ships a bundled catalog** as the first-party data-only plugin `plugins/corbits-skills/` (id `corbits-skills`, kind `command`, `defaultEnabled: true`). Origin `repo` is auto-trusted. Auto-**enable** applies only when `origin === "repo"` AND `manifest.defaultEnabled` is true AND `settings.plugins[id]` is missing; an explicit `enabled: false` still disables. Marketplace (user / project / path / claude) `defaultEnabled` is ignored — those plugins stay opt-in. The id is `corbits-skills` (not `gaas`) so a later marketplace plugin cannot replace the module by id collision.