- raw now refuses destructive methods (delete/uninstall/remove/reconfigure) without --confirm (it previously bypassed all gating) - --json is now accepted after the subcommand (shared via a common parent parser), matching the documented usage - drop a placeholder-less f-string - SKILL.md: document raw gating + that raw echoes upstream responses verbatim Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>