Problem
Running cua-driver skill currently falls through to the implicit MCP tool-call route and fails with:
Permission denied: tool 'skill' has no reviewed risk classification
This is surprising when an agent or user casually asks the CLI where its bundled skill lives.
Scope
Treat the exact singular command cua-driver skill as a read-only shortcut for the existing cua-driver skills path behavior. Keep the plural skills {install|update|uninstall|status|path} management surface unchanged.
Acceptance evidence
cua-driver skill exits successfully without a daemon and prints exactly the local skill-pack directory.
cua-driver skills path continues to print the same directory.
- finite-command/operation classification reports the alias as the reviewed read-only
skills/path operation.
- focused Rust tests pass across the shared CLI implementation.
Selected for implementation by the maintainer request that reported the reproducer.
Problem
Running
cua-driver skillcurrently falls through to the implicit MCP tool-call route and fails with:This is surprising when an agent or user casually asks the CLI where its bundled skill lives.
Scope
Treat the exact singular command
cua-driver skillas a read-only shortcut for the existingcua-driver skills pathbehavior. Keep the pluralskills {install|update|uninstall|status|path}management surface unchanged.Acceptance evidence
cua-driver skillexits successfully without a daemon and prints exactly the local skill-pack directory.cua-driver skills pathcontinues to print the same directory.skills/pathoperation.Selected for implementation by the maintainer request that reported the reproducer.