[goldron1]

Summary

• Require --allowed-only on every --list-skills / --list-skill-versions call; refuse unfiltered / blocked-content requests and point the user at the project governance owner.
• Resolve jf skills install with a concrete version then repo from one versions response — never default to latest or the first repo.
• Use Cursor’s native single-choice picker for ambiguous versions/repos (markdown table fallback).

Test plan

• Ask “what skills are available in <project>?” — listing uses --allowed-only; user-facing table has no flags/cursors.
• Ask to see blocked / all skills — agent refuses, does not re-run without --allowed-only.
• Install a skill with one version and one repo — command uses that exact version, not latest.
• Install a skill with one version hosted in two repos — native picker offers repoKeys only; no auto-pick.

Made with Cursor

[github-actions]

Thank you for your submission, we really appreciate it. Like many open-source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution. You can sign the CLA by just posting a Pull Request Comment same as the below format.

---

I have read the CLA Document and I hereby sign the CLA

---

_{You can retrigger this bot by commenting recheck in this Pull Request. Posted by the CLA Assistant Lite bot.}