From 87300ab4767cd218bf8e1f9679b5a9d68a879301 Mon Sep 17 00:00:00 2001 From: Anton Standrik Date: Thu, 16 Jul 2026 23:21:39 +0300 Subject: [PATCH] fix: require approval for graph mutations --- skills/codebase-memory-mcp/SKILL.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/skills/codebase-memory-mcp/SKILL.md b/skills/codebase-memory-mcp/SKILL.md index b3daba23..4ad3a7e1 100644 --- a/skills/codebase-memory-mcp/SKILL.md +++ b/skills/codebase-memory-mcp/SKILL.md @@ -23,5 +23,5 @@ Use the configured Codebase Memory graph as a discovery accelerator, not as the ## Safety and Fallbacks - Do not install Codebase Memory or another third-party skill from this workflow. -- Do not call `delete_project`, ingest traces, update ADRs, or index a repository unless the user requested it or graph access is clearly required and the action has been announced. +- Do not call `delete_project`, ingest traces, update ADRs, or index a repository unless the user explicitly requested or approved the action; announce it before execution. - Fall back to normal repository exploration when the MCP server, project, index, or required capability is unavailable; do not invent tool results or stop a task that can be completed safely without the graph.