Cursor skills stay in lockstep with serve handlers. CI checks every bin/ path named in SKILL.md exists.
Agents get GET /openapi.json and POST /mcp. Tool names match search/get/stats/audit paths so PicoClaw does not need shebangs.