2026-07-01-paperclip-skill-mutations-gated-behind-a-dedicated-skills-create-p

Skill mutations gated behind a dedicated skills:create permission, split from agents:create authority (channel: tagged-release, 2026-06-27). Operator consequence: Re-audit role/permission grants: install/import/create/update/delete/scan of company skills now requires the narrower skills:create capability. Lower-privileged users can browse but no longer mutate skills. Confirm intended actors still hold the new permission after upgrade. Full receipted detail lives in harvest/watchlist.md.

Receipt

https://github.com/paperclipai/paperclip/pull/8616

Finding metadata

Confidence: high

Run: 2026-07-01-weekly-digest-2026-06-24_2026-07-01-frontier-v0

Finding ID: 2026-07-01-paperclip-skill-mutations-gated-behind-a-dedicated-skills-create-p

Accepted signals

Paperclip v2026.626.0 tags its master-only control plane: daily run/cost budget caps, a split skills:create permission, cross-company auth hardening / 2026-07-01

Source links

Primary links, including exact changelog lines when available.

Paperclip
merged pr2026-07-01-paperclip-skill-mutations-gated-behind-a-dedicated-skills-create-pgithub.com/paperclipai/paperclip/pull/8616

Versioned source: run artifact