all skills: parse CLI output defensively

skills/build-workflow/SKILL.md

@@ -22,6 +22,20 @@ more than one call, branching, or a schedule.
   Preserve blocks, edges, variables, and deployment state outside the requested change.
 - If the workflow is locked or read-only, stop instead of attempting an alternate mutation path.
 
+## Parse CLI output defensively
+
+- `--output json` can print human notice lines to stdout above the JSON body (truncation notices,
+  for example). Strip everything before the first `[` or `{` before parsing.
+- `sim files read` visibly truncates content in its default rendering. Use `--output json` whenever
+  the full content matters.
+- `workflows state get` returns the bare `{blocks, edges, loops, parallels, variables}` object;
+  `workflows export` wraps the same state in a portable envelope. A jq filter written for one shape
+  and run against the other yields an empty document with no error - the most dangerous kind of
+  wrong. Match the filter to the command.
+- Select a profile with `SIM_PROFILE=<name>` or an explicit `-P <name>` argument. Interpolating a
+  shell variable that holds `-P <name>` passes the name with a leading space and fails with an
+  unknown-profile error.
+
 ## Design before encoding
 
 - Translate the request into an entry point, required transformations or decisions, external

skills/deploy-workflow/SKILL.md

@@ -51,3 +51,17 @@ ahead of the deployed version, say so.
 Undeploy only on an explicit request. Use `workflows undeploy`, `workflows chat unpublish`, or
 `workflow-mcp-servers tools delete` for the matching surface, supplying confirmation where the CLI
 requires it. Then read the matching deployment status or MCP tool list again to verify it is offline.
+
+## Parse CLI output defensively
+
+- `--output json` can print human notice lines to stdout above the JSON body (truncation notices,
+  for example). Strip everything before the first `[` or `{` before parsing.
+- `sim files read` visibly truncates content in its default rendering. Use `--output json` whenever
+  the full content matters.
+- `workflows state get` returns the bare `{blocks, edges, loops, parallels, variables}` object;
+  `workflows export` wraps the same state in a portable envelope. A jq filter written for one shape
+  and run against the other yields an empty document with no error - the most dangerous kind of
+  wrong. Match the filter to the command.
+- Select a profile with `SIM_PROFILE=<name>` or an explicit `-P <name>` argument. Interpolating a
+  shell variable that holds `-P <name>` passes the name with a leading space and fails with an
+  unknown-profile error.

skills/knowledge-base/SKILL.md

@@ -17,6 +17,16 @@ query whose expected answer is present in the source material.
 - Keep ids returned by create, upload, and connector calls. Do not rediscover resources by display
   name when an exact id is available.
 
+## Parse CLI output defensively
+
+- `--output json` can print human notice lines to stdout above the JSON body (truncation notices,
+  for example). Strip everything before the first `[` or `{` before parsing.
+- `sim files read` visibly truncates content in its default rendering. Use `--output json` whenever
+  the full content matters.
+- Select a profile with `SIM_PROFILE=<name>` or an explicit `-P <name>` argument. Interpolating a
+  shell variable that holds `-P <name>` passes the name with a leading space and fails with an
+  unknown-profile error.
+
 ## Create with intentional chunking
 
 For ordinary documents, begin with the server defaults unless the user has a retrieval reason to

skills/run-tool/SKILL.md

@@ -16,6 +16,16 @@ Never put a live credential in the command.
 - An unversioned name resolves to the newest version visible in the workspace, and the response
   echoes the id that answered. Use that id in the call.
 
+## Parse CLI output defensively
+
+- `--output json` can print human notice lines to stdout above the JSON body (truncation notices,
+  for example). Strip everything before the first `[` or `{` before parsing.
+- `sim files read` visibly truncates content in its default rendering. Use `--output json` whenever
+  the full content matters.
+- Select a profile with `SIM_PROFILE=<name>` or an explicit `-P <name>` argument. Interpolating a
+  shell variable that holds `-P <name>` passes the name with a leading space and fails with an
+  unknown-profile error.
+
 ## Bind auth from the declaration, not from habit
 
 `tools get` labels every parameter with a `visibility`, and the label says where its value comes

skills/run-workflow/SKILL.md

@@ -52,6 +52,20 @@ workflow and contains the state the selected block needs.
 - Use `--async` only for deployed runs that should return immediately. Then wait with
   `workflows runs wait` or inspect with `workflows runs get`; do not poll without a stopping bound.
 
+## Parse CLI output defensively
+
+- `--output json` can print human notice lines to stdout above the JSON body (truncation notices,
+  for example). Strip everything before the first `[` or `{` before parsing.
+- `sim files read` visibly truncates content in its default rendering. Use `--output json` whenever
+  the full content matters.
+- `workflows state get` returns the bare `{blocks, edges, loops, parallels, variables}` object;
+  `workflows export` wraps the same state in a portable envelope. A jq filter written for one shape
+  and run against the other yields an empty document with no error - the most dangerous kind of
+  wrong. Match the filter to the command.
+- Select a profile with `SIM_PROFILE=<name>` or an explicit `-P <name>` argument. Interpolating a
+  shell variable that holds `-P <name>` passes the name with a leading space and fails with an
+  unknown-profile error.
+
 ## Diagnose failures
 
 1. Read the returned run id, status, error, and selected outputs.

skills/table/SKILL.md

@@ -16,6 +16,16 @@ smallest requested mutation, and verify stored rows or run state afterward.
   `sim --output json tables get <tableId>` before changing its schema or data.
 - Keep the returned table id. Do not rediscover a table by name after creating it.
 
+## Parse CLI output defensively
+
+- `--output json` can print human notice lines to stdout above the JSON body (truncation notices,
+  for example). Strip everything before the first `[` or `{` before parsing.
+- `sim files read` visibly truncates content in its default rendering. Use `--output json` whenever
+  the full content matters.
+- Select a profile with `SIM_PROFILE=<name>` or an explicit `-P <name>` argument. Interpolating a
+  shell variable that holds `-P <name>` passes the name with a leading space and fails with an
+  unknown-profile error.
+
 ## Design the schema first
 
 Create a table with at least one explicit column: