diff --git a/AGENTS.md b/AGENTS.md
index 647339bc..b6b0042d 100644
--- a/AGENTS.md
+++ b/AGENTS.md
@@ -46,7 +46,7 @@ claim in both.
   here; it can't be expressed in the catalog.
 - **Go command test** (`cmd/**/*_test.go` with `httpmock`) — full CLI wiring
   end to end, but with a stubbed resolver so it stays deterministic. Runs in
-  the blocking `test` CI job with no token. Reach for this to prove the
+  the blocking `go-test` CI job with no token. Reach for this to prove the
   command plumbs its pieces together.
 - **Catalog scenario** (`test/scenarios/catalog.yml`, run by the Ruby
   harness) — the *real compiled binary* against the real API or a stub
diff --git a/skills/gh-actions-lock/SKILL.md b/skills/gh-actions-lock/SKILL.md
index c2416de5..c7de0fbd 100644
--- a/skills/gh-actions-lock/SKILL.md
+++ b/skills/gh-actions-lock/SKILL.md
@@ -135,8 +135,8 @@ category name alone.
 
 Copy [`.github/workflows/verify-lockfile.yml`](https://github.com/github/gh-actions-lock/blob/main/.github/workflows/verify-lockfile.yml)
 into the repository, then run `gh actions-lock` once so the new workflow is locked too. It runs
-`gh actions-lock --verify` on pull requests, pushes to `main`, and a weekly schedule that catches
-re-pointed tags. The job's `GITHUB_TOKEN` reads public actions and the repository itself; actions
+`gh actions-lock --verify` on pull requests and pushes to `main`. The job's `GITHUB_TOKEN` reads
+public actions and the repository itself; actions
 from other private or internal repositories need a token that can read them.
 
 ## Limits
@@ -149,6 +149,9 @@ from other private or internal repositories need a token that can read them.
 
 ## Learn more
 
+To diagnose a slow online run, add `--profile <dir>` and read the completed run's
+stderr summary for phase timings, HTTP request counts, and latency.
+
 `gh actions-lock --help` is authoritative for flags. Failed runs print the path of a saved run
 log; attach it to bug reports. Start from these, plus each finding's `doc_url`: