fix(kyberforge): apply audit findings to agent-author skill

- Fix Copilot format conflation: split CLI vs cloud/IDE in Step 3,
  clean copilot template to CLI-only fields, add body length limit (30k)
- Add missing CC fields to Step 2: disallowedTools, skills, color,
  initialPrompt, background
- Fix Gotchas: add WaitForMcpServers to unavailable tools list,
  add ExitPlanMode plan-mode carve-out
- Make 'Use proactively' conditional (was unconditional directive)
- Clarify audit invocation to 'Invoke kyberforge:agent-audit skill directly'
- Add 'Would the agent get this wrong?' heuristic to Improve Step 4
- Add agent-audit co-install prerequisite check
- Add pre-audit manual checklist to validate/close step
- Add references/scripts.md for new-agent.sh conventions
- Fix sources.md: remove template/script files from Contributing files
  (templates can't carry YAML provenance without leaking into user files),
  add 3 missing research slugs with (none) contributing files
- Add context7-github-en-copilot to deployment-modes.md source_keys
- Update README.md and references/README.md with new scripts.md entry

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0147vXtL5sP6vorDdqXGJJU9

plugins/kyberforge/skills/agent-author/assets/templates/claude-code.md

@@ -18,7 +18,8 @@ description: FILL IN: Action-first description of what this agent does and when
 # Use Agent(type1,type2) to restrict which subagent types this agent can spawn.
 # Omit Agent entirely to prevent this agent from spawning subagents.
 # Never available to subagents regardless of tools field:
-#   AskUserQuestion, EnterPlanMode, ExitPlanMode, ScheduleWakeup
+#   AskUserQuestion, EnterPlanMode, ExitPlanMode, ScheduleWakeup, WaitForMcpServers
+# Exception: ExitPlanMode IS available when parent session runs in permissionMode: plan
 
 # model: sonnet
 # Optional. Aliases: sonnet, opus, haiku, fable. Or full model ID.
@@ -45,6 +46,19 @@ description: FILL IN: Action-first description of what this agent does and when
 # background: false
 # Optional. Set true to force background execution.
 
+# disallowedTools: mcp__filesystem__write_file
+# Optional. Space-separated denylist, applied before the tools allowlist.
+# Supports mcp__* glob patterns (e.g. mcp__filesystem__* to block all filesystem tools).
+
+# skills:
+#   - skill-name
+# Optional. Skill names preloaded into this agent's context at startup.
+# Different from the source_keys metadata field (which is provenance-only).
+
+# initialPrompt: "Start by reading the README."
+# Optional. Auto-submitted as the first turn when this agent activates as the main session thread.
+# Only set when this agent is intended for main-thread (not subagent) activation.
+
 # source_keys:
 #   - slug-name
 # Development-only. Add when research sources informed this agent (slugs must match agents/sources.md).

plugins/kyberforge/skills/agent-author/assets/templates/copilot.agent.md

@@ -1,7 +1,12 @@
 ---
-# GitHub Copilot CLI agent definition
-# File extension MUST be .agent.md — a plain .md file is not picked up by Copilot.
+# GitHub Copilot CLI agent definition (CLI format — path: .github/agents/<name>.agent.md)
+# File extension MUST be .agent.md — a plain .md file is not picked up by Copilot CLI.
 # Fill in all FILL IN: placeholders. Remove or uncomment optional fields as needed.
+# Body length limit: 30,000 characters — content beyond this is silently truncated.
+#
+# NOTE: This template is for the CLI format. The cloud/IDE format (path: .github/copilot/agents/<name>.md,
+# extension: .md) supports additional fields: target, user-invocable, disable-model-invocation, mcp-servers.
+# Do not add those fields here — they are silently ignored by the CLI runtime.
 
 name: AGENT_NAME
 # Required. Kebab-case identifier. Home-directory version wins on name collision.
@@ -22,20 +27,10 @@ description: FILL IN: Action-first description of what this agent does and when
 #   web       — web search and fetch (aliases: WebSearch, WebFetch)
 # For MCP tools: "server-name/tool-name" or "server-name/*"
 
-# target: github-copilot
-# Optional. Which runtime loads this file.
-#   vscode          — VS Code Copilot only
-#   github-copilot  — Copilot CLI / cloud agents only
-#   both (default)  — loaded by both runtimes
-
-# user-invocable: true
-# Optional. Set false to hide from manual invocation (auto-select only).
-
-# disable-model-invocation: false
-# Optional. Set true to require explicit user invocation; prevents auto-selection.
-
 # model: claude-sonnet-4-5
 # Optional. Model to run this agent on.
+# Cloud/IDE-only fields (target, user-invocable, disable-model-invocation, mcp-servers)
+# are not valid in this CLI format — use the .github/copilot/agents/<name>.md path for those.
 
 # source_keys:
 #   - slug-name