Add trusted tooling and leverage guidance

agent-swarm/SKILL.md

@@ -40,9 +40,17 @@ implementer and one critic; parallel panel writers produce incoherent UI.
    the baseline, fix the slice before expanding scope.
 8. **One milestone at a time.** For product work, do not start M1/M2 while M0 is still rough or
    explicitly “not usable”.
-9. **Safety.** Check prerequisites before work; ask before global installs, destructive actions,
-   deployments or irreversible changes. Workers never install or touch live systems.
-10. **User overrides.** Direct user instructions beat this skill. If the user asks for speed, a
+9. **Safety and trusted tools.** Check prerequisites before work. Prefer existing, project-local,
+   pinned tools; use official package managers/registries and lockfiles. Verify the source, license,
+   release and checksum/signature when possible. No `curl | sh`, random binaries, unpinned “latest”
+   or unvetted AI-suggested packages. Ask before `sudo`, global/system installs, destructive actions,
+   deployments or irreversible changes. Workers never install or touch live systems; they return
+   `blocked` with the exact missing item.
+10. **Build leverage.** If a harness, script, fixture, screenshot tool or dev utility will be reused,
+    build it, test it, document it and keep it in the repo. Prefer one small reliable tool over a
+    pile of one-off commands. A broken or untrusted tool is worse than no tool; delete tools nobody
+    uses.
+11. **User overrides.** Direct user instructions beat this skill. If the user asks for speed, a
     prototype or “just do it”, drop the ceremony — keep only the safety and evidence that still
     matter.
 
@@ -51,7 +59,8 @@ implementer and one critic; parallel panel writers produce incoherent UI.
 1. **Understand** the outcome, audience, quality bar and constraints. Ask only when the answer
    changes the result.
 2. **Check** the environment: toolchain, commands, services, display, credentials. If a required
-   item is missing and cannot be resolved safely, ask before starting.
+   item is missing, check whether a small project-local harness/tool can remove the blocker; install
+   only trusted, pinned tools. If it cannot be resolved safely, ask before starting.
 3. **Plan only as much as the risk requires.** For a swarm, write a one-page brief, disjoint scopes,
    frozen contracts and acceptance checks. For direct/paired work, skip the ceremony.
 4. **Work.** Direct, paired or batched workers. Keep files small enough that each worker reads only