diff --git a/skills/ask-matt/spec.yaml b/skills/ask-matt/spec.yaml
index 5ab611b4..6379aca4 100644
--- a/skills/ask-matt/spec.yaml
+++ b/skills/ask-matt/spec.yaml
@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/ask-matt"
-  version: "0.3.1"
+  version: "0.3.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"
diff --git a/skills/codebase-design/spec.yaml b/skills/codebase-design/spec.yaml
index d829ff92..ca476fe7 100644
--- a/skills/codebase-design/spec.yaml
+++ b/skills/codebase-design/spec.yaml
@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/codebase-design"
-  version: "0.3.1"
+  version: "0.3.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"
diff --git a/skills/diagnosing-bugs/spec.yaml b/skills/diagnosing-bugs/spec.yaml
index cdda5f20..45036abb 100644
--- a/skills/diagnosing-bugs/spec.yaml
+++ b/skills/diagnosing-bugs/spec.yaml
@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/diagnosing-bugs"
-  version: "0.3.1"
+  version: "0.3.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"
diff --git a/skills/domain-modeling/spec.yaml b/skills/domain-modeling/spec.yaml
index a1522cbb..1122d517 100644
--- a/skills/domain-modeling/spec.yaml
+++ b/skills/domain-modeling/spec.yaml
@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/domain-modeling"
-  version: "0.3.1"
+  version: "0.3.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"
diff --git a/skills/git-guardrails-claude-code/spec.yaml b/skills/git-guardrails-claude-code/spec.yaml
index a3ff8666..98af01fa 100644
--- a/skills/git-guardrails-claude-code/spec.yaml
+++ b/skills/git-guardrails-claude-code/spec.yaml
@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/misc/git-guardrails-claude-code"
-  version: "0.4.1"
+  version: "0.4.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"
diff --git a/skills/grill-me/spec.yaml b/skills/grill-me/spec.yaml
index 5a4b2de0..897f9916 100644
--- a/skills/grill-me/spec.yaml
+++ b/skills/grill-me/spec.yaml
@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/productivity/grill-me"
-  version: "0.4.1"
+  version: "0.4.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"
diff --git a/skills/grill-with-docs/spec.yaml b/skills/grill-with-docs/spec.yaml
index dd2f1080..0fa9dce2 100644
--- a/skills/grill-with-docs/spec.yaml
+++ b/skills/grill-with-docs/spec.yaml
@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/grill-with-docs"
-  version: "0.4.1"
+  version: "0.4.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"
diff --git a/skills/grilling/spec.yaml b/skills/grilling/spec.yaml
index a9d2562e..e02bed56 100644
--- a/skills/grilling/spec.yaml
+++ b/skills/grilling/spec.yaml
@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/productivity/grilling"
-  version: "0.4.1"
+  version: "0.4.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"
diff --git a/skills/handoff/spec.yaml b/skills/handoff/spec.yaml
index cd72175d..a8b2bda7 100644
--- a/skills/handoff/spec.yaml
+++ b/skills/handoff/spec.yaml
@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/productivity/handoff"
-  version: "0.3.1"
+  version: "0.3.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"
diff --git a/skills/implement/spec.yaml b/skills/implement/spec.yaml
index 0b286aa9..532620df 100644
--- a/skills/implement/spec.yaml
+++ b/skills/implement/spec.yaml
@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/implement"
-  version: "0.3.1"
+  version: "0.3.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"
diff --git a/skills/improve-codebase-architecture/spec.yaml b/skills/improve-codebase-architecture/spec.yaml
index 55df6645..9fc79316 100644
--- a/skills/improve-codebase-architecture/spec.yaml
+++ b/skills/improve-codebase-architecture/spec.yaml
@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/improve-codebase-architecture"
-  version: "0.4.1"
+  version: "0.4.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"
@@ -27,3 +27,7 @@ security:
     # the official Tailwind and Mermaid CDNs and no user data is transmitted anywhere.
     - rule_id: PG_EXFIL_HTML_TAG
       reason: "FP: scanner matched the Tailwind CDN <script> tag in HTML-REPORT.md's static report scaffold; a script include from the official CDN in a local, self-contained report template, no data exfiltration."
+    - rule_id: LLM_PROMPT_INJECTION
+      reason: "Risk accepted by maintainer (danbarr, 2026-08-25): SKILL.md instructs the agent to read and incorporate CONTEXT.md and ADR files from docs/adr/ into its architectural analysis. These are project-local files the user already trusts and maintains; processing them is the skill's documented purpose (aligning suggestions with existing domain vocabulary and decisions). Same class of accepted risk as skills/hf-mcp and skills/huggingface-tool-builder."
+    - rule_id: LLM_PROMPT_INJECTION
+      reason: "Risk accepted by maintainer (danbarr, 2026-08-25): SKILL.md instructs the agent to run `git log --oneline` to find commit-history hot spots that guide where to focus analysis. Commit messages come from the project's own history, which the user already trusts; using them as a weighting signal is the skill's documented purpose, not processing of arbitrary external input."
diff --git a/skills/matt-pocock-code-review/spec.yaml b/skills/matt-pocock-code-review/spec.yaml
index 3a0c08de..9d7a33a4 100644
--- a/skills/matt-pocock-code-review/spec.yaml
+++ b/skills/matt-pocock-code-review/spec.yaml
@@ -11,9 +11,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/code-review"
-  version: "0.3.1"
+  version: "0.3.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"
diff --git a/skills/migrate-to-shoehorn/spec.yaml b/skills/migrate-to-shoehorn/spec.yaml
index 09e4156f..277724b4 100644
--- a/skills/migrate-to-shoehorn/spec.yaml
+++ b/skills/migrate-to-shoehorn/spec.yaml
@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/misc/migrate-to-shoehorn"
-  version: "0.4.1"
+  version: "0.4.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"
diff --git a/skills/prototype/spec.yaml b/skills/prototype/spec.yaml
index 21685c01..690c1433 100644
--- a/skills/prototype/spec.yaml
+++ b/skills/prototype/spec.yaml
@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/prototype"
-  version: "0.3.1"
+  version: "0.3.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"
diff --git a/skills/research/spec.yaml b/skills/research/spec.yaml
index a4f18543..b4026d7a 100644
--- a/skills/research/spec.yaml
+++ b/skills/research/spec.yaml
@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/research"
-  version: "0.3.1"
+  version: "0.3.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"
diff --git a/skills/resolving-merge-conflicts/spec.yaml b/skills/resolving-merge-conflicts/spec.yaml
index 0e2358b9..cbe20dd5 100644
--- a/skills/resolving-merge-conflicts/spec.yaml
+++ b/skills/resolving-merge-conflicts/spec.yaml
@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/resolving-merge-conflicts"
-  version: "0.3.1"
+  version: "0.3.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"
diff --git a/skills/scaffold-exercises/spec.yaml b/skills/scaffold-exercises/spec.yaml
index 069d4019..8bedfc91 100644
--- a/skills/scaffold-exercises/spec.yaml
+++ b/skills/scaffold-exercises/spec.yaml
@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/misc/scaffold-exercises"
-  version: "0.4.1"
+  version: "0.4.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"
diff --git a/skills/setup-matt-pocock-skills/spec.yaml b/skills/setup-matt-pocock-skills/spec.yaml
index 469205fb..12f22c59 100644
--- a/skills/setup-matt-pocock-skills/spec.yaml
+++ b/skills/setup-matt-pocock-skills/spec.yaml
@@ -10,9 +10,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/setup-matt-pocock-skills"
-  version: "0.4.1"
+  version: "0.4.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"
diff --git a/skills/setup-pre-commit/spec.yaml b/skills/setup-pre-commit/spec.yaml
index 8d631a4b..504f1531 100644
--- a/skills/setup-pre-commit/spec.yaml
+++ b/skills/setup-pre-commit/spec.yaml
@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/misc/setup-pre-commit"
-  version: "0.4.1"
+  version: "0.4.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"
diff --git a/skills/tdd/spec.yaml b/skills/tdd/spec.yaml
index dbc8ddab..5719acae 100644
--- a/skills/tdd/spec.yaml
+++ b/skills/tdd/spec.yaml
@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/tdd"
-  version: "0.4.1"
+  version: "0.4.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"
diff --git a/skills/teach/spec.yaml b/skills/teach/spec.yaml
index be39744a..28d6c634 100644
--- a/skills/teach/spec.yaml
+++ b/skills/teach/spec.yaml
@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/productivity/teach"
-  version: "0.3.1"
+  version: "0.3.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"
diff --git a/skills/to-questionnaire/spec.yaml b/skills/to-questionnaire/spec.yaml
index 68237fbc..4d1820d3 100644
--- a/skills/to-questionnaire/spec.yaml
+++ b/skills/to-questionnaire/spec.yaml
@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/productivity/to-questionnaire"
-  version: "0.2.1"
+  version: "0.2.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"
diff --git a/skills/to-spec/spec.yaml b/skills/to-spec/spec.yaml
index a1da86fd..dedb935a 100644
--- a/skills/to-spec/spec.yaml
+++ b/skills/to-spec/spec.yaml
@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/to-spec"
-  version: "0.3.1"
+  version: "0.3.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"
diff --git a/skills/to-tickets/spec.yaml b/skills/to-tickets/spec.yaml
index a3fbff6d..0a618356 100644
--- a/skills/to-tickets/spec.yaml
+++ b/skills/to-tickets/spec.yaml
@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/to-tickets"
-  version: "0.3.1"
+  version: "0.3.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"
diff --git a/skills/triage/spec.yaml b/skills/triage/spec.yaml
index 70507a98..a33e4eb1 100644
--- a/skills/triage/spec.yaml
+++ b/skills/triage/spec.yaml
@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/triage"
-  version: "0.4.1"
+  version: "0.4.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"
@@ -21,3 +21,5 @@ security:
   allowed_issues:
     - rule_id: MANIFEST_MISSING_LICENSE
       reason: "mattpocock/skills is licensed MIT at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter."
+    - rule_id: ATR_2026_00051
+      reason: "FP: 'all files' matches OUT-OF-SCOPE.md's instruction to read all files in the project-local `.out-of-scope/` knowledge-base directory (OUT-OF-SCOPE.md:72), a scoped and bounded read, not an unbounded filesystem scan."
diff --git a/skills/wait-what/spec.yaml b/skills/wait-what/spec.yaml
index 8b121634..b3ada86a 100644
--- a/skills/wait-what/spec.yaml
+++ b/skills/wait-what/spec.yaml
@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/productivity/wait-what"
-  version: "0.1.1"
+  version: "0.1.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"
diff --git a/skills/wayfinder/spec.yaml b/skills/wayfinder/spec.yaml
index 689d82d4..776d1f1b 100644
--- a/skills/wayfinder/spec.yaml
+++ b/skills/wayfinder/spec.yaml
@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/wayfinder"
-  version: "0.3.1"
+  version: "0.3.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"
diff --git a/skills/wizard/spec.yaml b/skills/wizard/spec.yaml
index 37c20829..ea22740c 100644
--- a/skills/wizard/spec.yaml
+++ b/skills/wizard/spec.yaml
@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/engineering/wizard"
-  version: "0.2.1"
+  version: "0.2.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"
@@ -21,3 +21,9 @@ security:
   allowed_issues:
     - rule_id: MANIFEST_MISSING_LICENSE
       reason: "mattpocock/skills is licensed MIT at the repository root; upstream does not embed an SPDX license identifier in per-skill SKILL.md frontmatter."
+    - rule_id: ATR_2026_00063
+      reason: "FP: scanner pattern-matches the literal string '.env' in SKILL.md prose describing the wizard's documented purpose - writing .env files during a human-run setup procedure - not a credential leak."
+    - rule_id: ATR_2026_01610
+      reason: "FP: 'bash -n <script>' is the standard non-executing syntax-check flag, used in the skill's own verification step before handing a generated script to the human."
+    - rule_id: ATR_2026_00064
+      reason: "FP: 'chmod +x' makes the skill's generated wizard script executable for the human to run, as documented in the hand-off step; not a privilege-escalation payload."
diff --git a/skills/writing-for-agents/spec.yaml b/skills/writing-for-agents/spec.yaml
index d04b7e9b..5c9ed575 100644
--- a/skills/writing-for-agents/spec.yaml
+++ b/skills/writing-for-agents/spec.yaml
@@ -9,9 +9,9 @@ metadata:
 
 spec:
   repository: "https://github.com/mattpocock/skills"
-  ref: "84fdeffd12f2ee307994d1eb6feb48173b6e0502"  # main as of 2026-08-06
+  ref: "068b6e0c62393147daf03530149cdce209c93da8"  # main as of 2026-08-06
   path: "skills/productivity/writing-for-agents"
-  version: "0.2.1"
+  version: "0.2.2"
 
 provenance:
   repository_uri: "https://github.com/mattpocock/skills"