diff --git a/.agents/skills/gstack-setup-browser-cookies/agents/openai.yaml b/.agents/skills/gstack-setup-browser-cookies/agents/openai.yaml
index 5cab5186..9f51dcbf 100644
--- a/.agents/skills/gstack-setup-browser-cookies/agents/openai.yaml
+++ b/.agents/skills/gstack-setup-browser-cookies/agents/openai.yaml
@@ -1,6 +1,6 @@
 interface:
   display_name: "gstack-setup-browser-cookies"
-  short_description: "Import cookies from your real browser (Comet, Chrome, Arc, Brave, Edge) into the headless browse session. Opens an..."
+  short_description: "Import cookies from your real Chromium browser into the headless browse session. Opens an interactive picker UI..."
   default_prompt: "Use gstack-setup-browser-cookies for this task."
 policy:
   allow_implicit_invocation: true
diff --git a/.github/workflows/evals.yml b/.github/workflows/evals.yml
index b2423017..b65d2ee9 100644
--- a/.github/workflows/evals.yml
+++ b/.github/workflows/evals.yml
@@ -157,6 +157,7 @@ jobs:
 
           TOTAL=0; PASSED=0; FAILED=0; COST="0"
           SUITE_LINES=""
+          # shellcheck disable=SC2086  # intentional word splitting
           for f in $RESULTS; do
             T=$(jq -r '.total_tests // 0' "$f")
             P=$(jq -r '.passed // 0' "$f")
diff --git a/actionlint.yaml b/actionlint.yaml
new file mode 100644
index 00000000..7c54d0c6
--- /dev/null
+++ b/actionlint.yaml
@@ -0,0 +1,3 @@
+self-hosted-runner:
+  labels:
+    - ubicloud-standard-2