Every runnable command now declares writes: 'network' (changes state on the network), 'local' (only this machine's sessions/config/shell) or false. The generated reference marks each writing command, lists them all up top, and refuses to generate while any runnable command lacks the declaration — so the classification cannot silently fall behind new commands. The bundled skill gains a 'Which commands write' section explaining what each action does and which ones write, and the README a 'What writes' section. Motivation: an agent that cannot tell reading from writing will eventually post by accident; now every document says which is which.