Your team shares a /scaffold-endpoint skill in .claude/skills/ that generates boilerplate for a new API route. Two problems keep coming up: developers often invoke it without naming the route, so the skill guesses one, and in one run it called a Bash command that deleted an existing directory. Which SKILL.md change addresses both problems?

Answer: B — Add argument-hint to prompt for the route name, and set allowed-tools to the read and file-write tools the scaffold needs so Bash is unavailable.

argument-hint prompts developers for a required parameter when they invoke the skill without one, and allowed-tools limits which tools the skill can use while it runs, which prevents destructive actions. (a) isolates the skill's context, not its file-system effects or its tool access. (c) loads task-specific instructions into every session, which is the wrong place for an on-demand workflow, and it doesn't restrict tools at all. (d) splits the team into personal variants and fixes neither problem.