/dossier-audit: skill body promises sub-agent spawn but allowed-tools omits Task/Agent

[brandon-behring]

.claude/skills/dossier-audit.md frontmatter:

allowed-tools: Read, Edit, Write, Bash, WebSearch, WebFetch

But the description says:

Spawns a fresh general-purpose sub-agent with WebSearch + WebFetch;
receives a DROP/CORRECT/FLAG/SPOT-CHECK report

Sub-agent spawning in Claude Code is via the Task (or Agent) tool, which
isn't listed. The contract is broken: a fresh session reading the frontmatter
would conclude the listed tools are sufficient, but the described workflow
requires Task.

In practice Claude can call tools beyond allowed-tools at runtime, so this
may not break the skill operationally. But the contract is misleading and
makes the skill's actual tool requirements harder to audit.

Suggested fix

Add Task to allowed-tools (or Agent, whichever the current CLI version
calls it).

Surfaced by

references/skill_audit_2026-05-26.md scorecard row for /dossier-audit.