Scope the skills tool description to executor's own docs

[RhysSullivan]

Closes #1731.

On a host with no skill tool of its own (pi), the model reads executor_skills as the general skill reader it is missing and asks it for the harness's or the user's skills. Three surfaces now state the boundary:

• the tool description leads with "Documentation for THIS server's own tools. Not a general skill reader", and names what it cannot reach (a harness's skills, a SKILL.md on disk, a path);
• the name argument describes itself as a catalog name, not a path;
• the index and the unknown-name miss — where a model that made this mistake actually lands — say the list is closed and covers only Executor's own tools.

Rendered index:

How-to docs for Executor's own tools — this is the complete list, and there is nothing else to fetch.
Fetch one with `skills({ name: "<name>" })`. Names outside this list, file paths, and skills belonging to your harness or the user are not served here.

- `execute` — How to call integrations from the execute sandbox: ...

Tests pin all three so the framing can't quietly regress. packages/hosts/mcp (188) and packages/core/execution (56) pass; format, lint, and typecheck are clean.

[github-actions]

Cloudflare preview

Torn down — the PR is closed.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	executor-marketing	f1ca880	Commit Preview URL Branch Preview URL	Aug 25 2026, 07:02 PM

[pkg-pr-new]

Open in StackBlitz

@executor-js/cli

npm i https://pkg.pr.new/@executor-js/cli@1737

@executor-js/config

npm i https://pkg.pr.new/@executor-js/config@1737

@executor-js/execution

npm i https://pkg.pr.new/@executor-js/execution@1737

@executor-js/sdk

npm i https://pkg.pr.new/@executor-js/sdk@1737

@executor-js/codemode-core

npm i https://pkg.pr.new/@executor-js/codemode-core@1737

@executor-js/runtime-quickjs

npm i https://pkg.pr.new/@executor-js/runtime-quickjs@1737

@executor-js/plugin-file-secrets

npm i https://pkg.pr.new/@executor-js/plugin-file-secrets@1737

@executor-js/plugin-graphql

npm i https://pkg.pr.new/@executor-js/plugin-graphql@1737

@executor-js/plugin-keychain

npm i https://pkg.pr.new/@executor-js/plugin-keychain@1737

@executor-js/plugin-mcp

npm i https://pkg.pr.new/@executor-js/plugin-mcp@1737

@executor-js/plugin-onepassword

npm i https://pkg.pr.new/@executor-js/plugin-onepassword@1737

@executor-js/plugin-openapi

npm i https://pkg.pr.new/@executor-js/plugin-openapi@1737

executor

npm i https://pkg.pr.new/executor@1737

commit: f1ca880