Every entry carries a permission label made by a real handshake (tools/list) or a real read of its SKILL.md. The label is shown before the button, and a new version shows what changed.
Nothing checked yet. The first entries land here after their handshake.