From a310dd9c55568440a7a0b60ec3d03346ec65cde3 Mon Sep 17 00:00:00 2001
From: Sambhav Kothari <sambhavs.email@gmail.com>
Date: Thu, 17 Sep 2026 09:57:22 +0200
Subject: [PATCH 1/2] Limit Skills WG repository admin access to WG leads

---
 src/config/repoAccess.ts | 6 +++---
 src/config/roleIds.ts    | 1 +
 src/config/roles.ts      | 5 +++++
 src/config/users.ts      | 3 +++
 4 files changed, 12 insertions(+), 3 deletions(-)

diff --git a/src/config/repoAccess.ts b/src/config/repoAccess.ts
index cf9e3bb..0710dfb 100644
--- a/src/config/repoAccess.ts
+++ b/src/config/repoAccess.ts
@@ -342,9 +342,9 @@ export const REPOSITORY_ACCESS: RepositoryAccess[] = [
   {
     repository: 'ext-skills',
     teams: [
-      { team: 'core-maintainers', permission: 'admin' },
-      { team: 'moderators', permission: 'maintain' },
-      { team: 'skills-over-mcp-wg', permission: 'admin' },
+      { team: 'moderators', permission: 'push' },
+      { team: 'skills-over-mcp-wg', permission: 'push' },
+      { team: 'skills-over-mcp-wg-leads', permission: 'admin' },
     ],
   },
   {
diff --git a/src/config/roleIds.ts b/src/config/roleIds.ts
index df990ad..4071114 100644
--- a/src/config/roleIds.ts
+++ b/src/config/roleIds.ts
@@ -62,6 +62,7 @@ export const ROLE_IDS = {
   FILE_UPLOADS_WG: 'file-uploads-wg',
   AGENTS_WG: 'agents-wg',
   SKILLS_OVER_MCP_WG: 'skills-over-mcp-wg',
+  SKILLS_OVER_MCP_WG_LEADS: 'skills-over-mcp-wg-leads',
   FILESYSTEMS_WG: 'filesystems-wg',
   CORE_PRIMITIVE_WG: 'core-primitive-wg',
 
diff --git a/src/config/roles.ts b/src/config/roles.ts
index cc65b07..2d4077b 100644
--- a/src/config/roles.ts
+++ b/src/config/roles.ts
@@ -366,6 +366,11 @@ export const ROLES: readonly Role[] = [
     github: { team: 'skills-over-mcp-wg', parent: ROLE_IDS.WORKING_GROUPS },
     discord: { role: 'skills over mcp working group (synced)' },
   },
+  {
+    id: ROLE_IDS.SKILLS_OVER_MCP_WG_LEADS,
+    description: 'Skills Over MCP Working Group leads',
+    github: { team: 'skills-over-mcp-wg-leads', parent: ROLE_IDS.SKILLS_OVER_MCP_WG },
+  },
   {
     id: ROLE_IDS.FILESYSTEMS_WG,
     description: 'Filesystems Working Group',
diff --git a/src/config/users.ts b/src/config/users.ts
index 5eb6f73..95eb47a 100644
--- a/src/config/users.ts
+++ b/src/config/users.ts
@@ -700,6 +700,7 @@ export const MEMBERS: readonly Member[] = [
       ROLE_IDS.MODERATORS,
       ROLE_IDS.REFERENCE_SERVERS_MAINTAINERS,
       ROLE_IDS.SKILLS_OVER_MCP_WG,
+      ROLE_IDS.SKILLS_OVER_MCP_WG_LEADS,
       ROLE_IDS.WORKING_GROUPS,
       ROLE_IDS.APPEALS,
     ],
@@ -763,6 +764,7 @@ export const MEMBERS: readonly Member[] = [
       ROLE_IDS.CORE_MAINTAINERS,
       ROLE_IDS.MAINTAINERS,
       ROLE_IDS.SKILLS_OVER_MCP_WG,
+      ROLE_IDS.SKILLS_OVER_MCP_WG_LEADS,
       ROLE_IDS.TRANSPORT_WG,
       ROLE_IDS.TRIGGERS_EVENTS_WG,
       ROLE_IDS.AGENTS_WG,
@@ -826,6 +828,7 @@ export const MEMBERS: readonly Member[] = [
       ROLE_IDS.FINANCIAL_SERVICES_IG,
       ROLE_IDS.INTERCEPTORS_WG,
       ROLE_IDS.SKILLS_OVER_MCP_WG,
+      ROLE_IDS.SKILLS_OVER_MCP_WG_LEADS,
     ],
   },
   {

From 3bca7e39e65ba6a2a1248eb93d2b04b0c33b43e7 Mon Sep 17 00:00:00 2001
From: Sambhav Kothari <sambhavs.email@gmail.com>
Date: Thu, 17 Sep 2026 12:08:24 +0200
Subject: [PATCH 2/2] Retain explicit core-maintainer admin access per review

---
 src/config/repoAccess.ts | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/config/repoAccess.ts b/src/config/repoAccess.ts
index 0710dfb..ec01025 100644
--- a/src/config/repoAccess.ts
+++ b/src/config/repoAccess.ts
@@ -342,6 +342,7 @@ export const REPOSITORY_ACCESS: RepositoryAccess[] = [
   {
     repository: 'ext-skills',
     teams: [
+      { team: 'core-maintainers', permission: 'admin' },
       { team: 'moderators', permission: 'push' },
       { team: 'skills-over-mcp-wg', permission: 'push' },
       { team: 'skills-over-mcp-wg-leads', permission: 'admin' },