diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 544ff98..821b632 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -6,6 +6,9 @@ on:
   pull_request:
     branches: [main]
 
+permissions:
+  contents: read
+
 jobs:
   test:
     name: Test
@@ -17,7 +20,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v5
         with:
-          go-version: "1.21"
+          go-version-file: go.mod
 
       - name: Cache Go modules
         uses: actions/cache@v4
diff --git a/.gitignore b/.gitignore
index f3e1625..972b6af 100644
--- a/.gitignore
+++ b/.gitignore
@@ -237,3 +237,5 @@ marimo/_static/
 marimo/_lsp/
 __marimo__/
 .omx/
+.agents/skills/
+.claude/skills/
diff --git a/skills/climate-generator/SKILL.md b/skills/climate-generator/SKILL.md
index 1284680..58d20e5 100644
--- a/skills/climate-generator/SKILL.md
+++ b/skills/climate-generator/SKILL.md
@@ -3,6 +3,11 @@ name: climate-generator
 description: >
   Generate Go CLIs from OpenAPI 3.x specs with climate, inspect generated CLIs,
   and emit Markdown skill prompts so those CLIs can be attached to agent workflows.
+license: Apache-2.0
+compatibility: Requires Go 1.21+ and climate CLI (brew install disk0Dancer/tap/climate)
+metadata:
+  author: disk0Dancer
+  version: "1.0"
 ---
 
 # Skill: climate-generator