[kyle-sexton]

Closes #12251

Summary

A plain-language request to run actionlint's apply step ends in install.mjs plan: every kept Sonnet run of ck-install-tempted-no-slash read skills/setup/SKILL.md and then ran plan (6 of 6), and Opus ran it in 5 of 5 runs of each VALID before pass on #6619.

Fix

• plugins/actionlint/skills/setup/SKILL.md: a rule at the top of the apply install-git-hooks section keeps the apply step behind the typed /actionlint:setup apply install-git-hooks; the user's answers to its questions continue that run. The check skill that was to carry the rule was deleted by #12640.
• ck-install-tempted-no-slash grants Glob and Grep. No grader, threshold or matcher changes.
• Three su-* case descriptions get their setup line citations moved by the inserted lines.
• Changelog fragment under .changes/actionlint/.

Verification

The done-when measurement cannot be made with the current claude plugin eval: every pair was gate-INVALID because Glob and find on the plugin copy outside the run workspace are denied, and no case field gives the run a readable copy (analysis). Context only, from those INVALID runs (36 runs, 3 attempts, Sonnet and Opus): before 0.5 (no-apply-step 0/3, names-setup-apply 0/3), after 1.0, in every attempt. These numbers support no conclusion under the run-validity gate.

The owner decided to ship on that disclosed context and close the issue on merge (decision).

Related

• #6619 (source measurement)
• #12640 (deleted the check skill)

🤖 Generated with Claude Code

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-11-03T18:05:12.628292Z	d27a2db	Draft marked ready

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[github-actions]

claude-security-review reviewed 9229a190c53128ea46d95da07770c4866a42f6cd: read 1 of 1 changed file(s); 0 finding(s), 0 as inline comments.

Security review (incremental): PR #12897

I found no security issues. This review covers the changes since d27a2dba, and I read the one changed file in full.

• plugins/actionlint/evals/ck-install-tempted-no-slash/prompt.md: only the eval case's description string changed. The new wording says that granting Glob and Grep does not keep the pass VALID, because the plugin copy sits outside the run workspace and searches of it are denied (fix(actionlint): main's skill text runs the apply flow on a plain-language install request (Opus 5/5) #12251). It also says the case now needs --allow-tools Bash Glob Grep. The text is prose metadata. It does not change the case's allowed_tools, which the previous round reviewed. It also removes no instruction or guardrail, so the instruction-surface lens has nothing to judge.
• Not touched: this push changes no plugin manifest, trusted path, workflow, token scope or trust control.
• Spend: none of this change can bill.

critical-findings: 0

[github-actions]

claude-review: 1 inline finding(s) on d27a2dbae7496ad3bb3ec2e4f7b325f93f529d79; the summary is in this lane's pull request comment.

claude-lane: claude-review

[github-actions]

claude-review reviewed 9229a190c53128ea46d95da07770c4866a42f6cd: read 1 of 1 changed file(s); 0 finding(s), 0 as inline comments.

Code review (incremental): PR #12897, from d27a2db to 9229a19

Scope: 1 of 1 file in the incremental list, read in full: plugins/actionlint/evals/ck-install-tempted-no-slash/prompt.md. I also read the head version of that file. The other 5 changed files have not changed since the last review.

What changed: only the case description (line 2) was edited. It now says the Glob and Grep grant "does not keep the pass VALID", because the plugin copy sits outside the run workspace and its searches are denied (#12251). The run note now reads Needs --allow-tools Bash Glob Grep.

Prior finding: the earlier advisory is resolved. The new text makes both requested corrections:

• It no longer suggests the grant prevents the INVALID verdict, which matches attempt 3 in fix(actionlint): main's skill text runs the apply flow on a plain-language install request (Opus 5/5) #12251.
• The run note now lists the flags the case's allowed_tools ([Skill, Bash, Read, Glob, Grep], line 6) needs.

The owner settled that thread with a recorded VALID-fix-now classification, and this commit is the fix. Nothing in it needs re-raising.

Other checks:

• No new findings in the incremental change.
• No plugin manifest changed, so there are no manifest lines.
• The PR context, settled-threads and prior-findings files contain no embedded directives.
• The closing-issue assessment from the last round still stands: both criteria are met, the second as amended by the owner's decision. This commit does not affect it.

Round count: this is round 2 of a cap of 3, so the cap did not apply.