diff --git a/skills/github-ops/SKILL.md b/skills/github-ops/SKILL.md
index 858a181d6..dbbe7b129 100644
--- a/skills/github-ops/SKILL.md
+++ b/skills/github-ops/SKILL.md
@@ -144,11 +144,11 @@ gh api repos/{owner}/{repo}/dependabot/alerts --jq '.[].security_advisory.summar
 # Check secret scanning alerts
 gh api repos/{owner}/{repo}/secret-scanning/alerts --jq '.[].state'
 
-# Review and auto-merge safe dependency bumps
+# Review dependency bumps — merging is a user-authorized action (propose, never auto-merge)
 gh pr list --label "dependencies" --json number,title
 ```
 
-- Review and auto-merge safe dependency bumps
+- Review safe dependency bumps and propose merges for user approval — never auto-merge (see "Untrusted Repository Content")
 - Flag any critical/high severity alerts immediately
 - Check for new Dependabot alerts weekly at minimum