diff --git a/careful/SKILL.md.tmpl b/careful/SKILL.md.tmpl
index d8bd4662..33c38ef8 100644
--- a/careful/SKILL.md.tmpl
+++ b/careful/SKILL.md.tmpl
@@ -17,6 +17,7 @@ hooks:
         - type: command
           command: "bash ${CLAUDE_SKILL_DIR}/bin/check-careful.sh"
           statusMessage: "Checking for destructive commands..."
+sensitive: true
 ---
 
 # /careful — Destructive Command Guardrails
diff --git a/freeze/SKILL.md.tmpl b/freeze/SKILL.md.tmpl
index 8765cc1f..b2b1de53 100644
--- a/freeze/SKILL.md.tmpl
+++ b/freeze/SKILL.md.tmpl
@@ -23,6 +23,7 @@ hooks:
         - type: command
           command: "bash ${CLAUDE_SKILL_DIR}/bin/check-freeze.sh"
           statusMessage: "Checking freeze boundary..."
+sensitive: true
 ---
 
 # /freeze — Restrict Edits to a Directory
diff --git a/guard/SKILL.md.tmpl b/guard/SKILL.md.tmpl
index 4dc35244..a96108fb 100644
--- a/guard/SKILL.md.tmpl
+++ b/guard/SKILL.md.tmpl
@@ -28,6 +28,7 @@ hooks:
         - type: command
           command: "bash ${CLAUDE_SKILL_DIR}/../freeze/bin/check-freeze.sh"
           statusMessage: "Checking freeze boundary..."
+sensitive: true
 ---
 
 # /guard — Full Safety Mode
diff --git a/land-and-deploy/SKILL.md.tmpl b/land-and-deploy/SKILL.md.tmpl
index acec63c2..a7ac546d 100644
--- a/land-and-deploy/SKILL.md.tmpl
+++ b/land-and-deploy/SKILL.md.tmpl
@@ -13,6 +13,7 @@ allowed-tools:
   - Write
   - Glob
   - AskUserQuestion
+sensitive: true
 ---
 
 {{PREAMBLE}}
diff --git a/scripts/gen-skill-docs.ts b/scripts/gen-skill-docs.ts
index f01dda98..1c2a3fee 100644
--- a/scripts/gen-skill-docs.ts
+++ b/scripts/gen-skill-docs.ts
@@ -353,9 +353,12 @@ function processTemplate(tmplPath: string, host: Host = 'claude'): { outputPath:
     throw new Error(`Unresolved placeholders in ${relTmplPath}: ${remaining.join(', ')}`);
   }
 
+  // For Claude: strip sensitive: field (only Factory uses it)
   // For external hosts: route output, transform frontmatter, rewrite paths
   let symlinkLoop = false;
-  if (host !== 'claude') {
+  if (host === 'claude') {
+    content = transformFrontmatter(content, host);
+  } else {
     const result = processExternalHost(content, tmplContent, host, skillDir, extractedDescription, ctx);
     content = result.content;
     outputPath = result.outputPath;
diff --git a/ship/SKILL.md.tmpl b/ship/SKILL.md.tmpl
index 62842fc5..722b3d2c 100644
--- a/ship/SKILL.md.tmpl
+++ b/ship/SKILL.md.tmpl
@@ -15,6 +15,7 @@ allowed-tools:
   - Agent
   - AskUserQuestion
   - WebSearch
+sensitive: true
 ---
 
 {{PREAMBLE}}
diff --git a/unfreeze/SKILL.md.tmpl b/unfreeze/SKILL.md.tmpl
index 12968579..074ba805 100644
--- a/unfreeze/SKILL.md.tmpl
+++ b/unfreeze/SKILL.md.tmpl
@@ -9,6 +9,7 @@ description: |
 allowed-tools:
   - Bash
   - Read
+sensitive: true
 ---
 
 # /unfreeze — Clear Freeze Boundary