diff --git a/.gitleaksignore b/.gitleaksignore
index 70f30ff8..3df38e2d 100644
--- a/.gitleaksignore
+++ b/.gitleaksignore
@@ -110,3 +110,70 @@ c5099d1dfbc58bd65ddd0e4efd267666260bb3f6:_bmad/_config/files-manifest.csv:generi
 4c9852dcd788730edfb9aaac3c7cca3a6777df9f:_bmad/_config/files-manifest.csv:generic-api-key:300
 4c9852dcd788730edfb9aaac3c7cca3a6777df9f:_bmad/_config/files-manifest.csv:generic-api-key:409
 4c9852dcd788730edfb9aaac3c7cca3a6777df9f:_bmad/_config/files-manifest.csv:generic-api-key:433
+
+# Commit 38e9f74: _bmad/_config/files-manifest.csv (lines 281, 282, 284, 300,
+# 409, 433) — same false positives as previous commits: SHA256 content checksums
+# in a CSV manifest file, not API keys. Gitleaks' generic-api-key rule flags
+# high-entropy hex strings; these are content-addressable checksums of BMAD
+# skill files (api-request.md, api-testing-patterns.md, auth-session.md,
+# email-auth.md, step-03a-subagent-api.md, step-04a-subagent-api-failing.md).
+38e9f74523fb9c79fa465831381c3ce9ac050c29:_bmad/_config/files-manifest.csv:generic-api-key:281
+38e9f74523fb9c79fa465831381c3ce9ac050c29:_bmad/_config/files-manifest.csv:generic-api-key:282
+38e9f74523fb9c79fa465831381c3ce9ac050c29:_bmad/_config/files-manifest.csv:generic-api-key:284
+38e9f74523fb9c79fa465831381c3ce9ac050c29:_bmad/_config/files-manifest.csv:generic-api-key:300
+38e9f74523fb9c79fa465831381c3ce9ac050c29:_bmad/_config/files-manifest.csv:generic-api-key:409
+38e9f74523fb9c79fa465831381c3ce9ac050c29:_bmad/_config/files-manifest.csv:generic-api-key:433
+
+# Commit da36d9b: _bmad/_config/files-manifest.csv (lines 281, 282, 284, 300,
+# 409, 433) — same false positives as previous commits: SHA256 content checksums
+# in a CSV manifest file, not API keys. Gitleaks' generic-api-key rule flags
+# high-entropy hex strings; these are content-addressable checksums of BMAD
+# skill files (api-request.md, api-testing-patterns.md, auth-session.md,
+# email-auth.md, step-03a-subagent-api.md, step-04a-subagent-api-failing.md).
+da36d9b36916087f02c4c367ad6107ab7dbdb152:_bmad/_config/files-manifest.csv:generic-api-key:281
+da36d9b36916087f02c4c367ad6107ab7dbdb152:_bmad/_config/files-manifest.csv:generic-api-key:282
+da36d9b36916087f02c4c367ad6107ab7dbdb152:_bmad/_config/files-manifest.csv:generic-api-key:284
+da36d9b36916087f02c4c367ad6107ab7dbdb152:_bmad/_config/files-manifest.csv:generic-api-key:300
+da36d9b36916087f02c4c367ad6107ab7dbdb152:_bmad/_config/files-manifest.csv:generic-api-key:409
+da36d9b36916087f02c4c367ad6107ab7dbdb152:_bmad/_config/files-manifest.csv:generic-api-key:433
+
+# Commits 38957566 and 449c717b: _bmad/_config/files-manifest.csv (lines 281,
+# 282, 284, 300, 409, 433) — same false positives as previous commits: SHA256
+# content checksums in a CSV manifest file, not API keys. These are content-addressable
+# checksums of BMAD skill files.
+38957566a56f3731d5bd2bc9dcb5e00131e82d74:_bmad/_config/files-manifest.csv:generic-api-key:281
+38957566a56f3731d5bd2bc9dcb5e00131e82d74:_bmad/_config/files-manifest.csv:generic-api-key:282
+38957566a56f3731d5bd2bc9dcb5e00131e82d74:_bmad/_config/files-manifest.csv:generic-api-key:284
+38957566a56f3731d5bd2bc9dcb5e00131e82d74:_bmad/_config/files-manifest.csv:generic-api-key:300
+38957566a56f3731d5bd2bc9dcb5e00131e82d74:_bmad/_config/files-manifest.csv:generic-api-key:409
+38957566a56f3731d5bd2bc9dcb5e00131e82d74:_bmad/_config/files-manifest.csv:generic-api-key:433
+449c717b8353cba9820c2cbd1413dfd83b4b2ea5:_bmad/_config/files-manifest.csv:generic-api-key:281
+449c717b8353cba9820c2cbd1413dfd83b4b2ea5:_bmad/_config/files-manifest.csv:generic-api-key:282
+449c717b8353cba9820c2cbd1413dfd83b4b2ea5:_bmad/_config/files-manifest.csv:generic-api-key:284
+449c717b8353cba9820c2cbd1413dfd83b4b2ea5:_bmad/_config/files-manifest.csv:generic-api-key:300
+449c717b8353cba9820c2cbd1413dfd83b4b2ea5:_bmad/_config/files-manifest.csv:generic-api-key:409
+449c717b8353cba9820c2cbd1413dfd83b4b2ea5:_bmad/_config/files-manifest.csv:generic-api-key:433
+
+# Commit 3d0fa154: _bmad/_config/files-manifest.csv (lines 281, 282, 284, 300,
+# 409, 433) — same false positives as previous commits: SHA256 content checksums
+# in a CSV manifest file, not API keys. These are content-addressable checksums
+# of BMAD skill files (api-request.md, api-testing-patterns.md, auth-session.md,
+# email-auth.md, step-03a-subagent-api.md, step-04a-subagent-api-failing.md).
+3d0fa154391350f48912593a0a9cd5671dba4ca8:_bmad/_config/files-manifest.csv:generic-api-key:281
+3d0fa154391350f48912593a0a9cd5671dba4ca8:_bmad/_config/files-manifest.csv:generic-api-key:282
+3d0fa154391350f48912593a0a9cd5671dba4ca8:_bmad/_config/files-manifest.csv:generic-api-key:284
+3d0fa154391350f48912593a0a9cd5671dba4ca8:_bmad/_config/files-manifest.csv:generic-api-key:300
+3d0fa154391350f48912593a0a9cd5671dba4ca8:_bmad/_config/files-manifest.csv:generic-api-key:409
+3d0fa154391350f48912593a0a9cd5671dba4ca8:_bmad/_config/files-manifest.csv:generic-api-key:433
+
+# Commit f57f0350: _bmad/_config/files-manifest.csv (lines 281, 282, 284, 300,
+# 409, 433) — same false positives as previous commits: SHA256 content checksums
+# in a CSV manifest file, not API keys. These are content-addressable checksums
+# of BMAD skill files (api-request.md, api-testing-patterns.md, auth-session.md,
+# email-auth.md, step-03a-subagent-api.md, step-04a-subagent-api-failing.md).
+f57f0350a41b516a0c37bd87943ed6d67842980c:_bmad/_config/files-manifest.csv:generic-api-key:281
+f57f0350a41b516a0c37bd87943ed6d67842980c:_bmad/_config/files-manifest.csv:generic-api-key:282
+f57f0350a41b516a0c37bd87943ed6d67842980c:_bmad/_config/files-manifest.csv:generic-api-key:284
+f57f0350a41b516a0c37bd87943ed6d67842980c:_bmad/_config/files-manifest.csv:generic-api-key:300
+f57f0350a41b516a0c37bd87943ed6d67842980c:_bmad/_config/files-manifest.csv:generic-api-key:409
+f57f0350a41b516a0c37bd87943ed6d67842980c:_bmad/_config/files-manifest.csv:generic-api-key:433
diff --git a/_bmad/_config/bmad-help.csv b/_bmad/_config/bmad-help.csv
index 3e096cbf..d8cf3fa1 100644
--- a/_bmad/_config/bmad-help.csv
+++ b/_bmad/_config/bmad-help.csv
@@ -46,4 +46,4 @@ Test Architecture Enterprise,bmad-testarch-framework,Test Framework,TF,Initializ
 Test Architecture Enterprise,bmad-testarch-nfr,NFR Assessment,NR,Non-functional requirements assessment.,,4-implementation,bmad-testarch-automate,,,,,false,test_artifacts,nfr report,
 Test Architecture Enterprise,bmad-testarch-test-design,Test Design,TD,Risk-based test planning.,,3-solutioning,false,bmad-testarch-framework,,,,false,test_artifacts,test design document,
 Test Architecture Enterprise,bmad-testarch-test-review,Test Review,RV,Quality audit (0-100 scoring).,,4-implementation,bmad-testarch-automate,,,,,false,test_artifacts,review report,
-Test Architecture Enterprise,bmad-testarch-trace,Traceability,TR,Coverage traceability and gate.,,4-implementation,bmad-testarch-test-review,,,,,false,test_artifacts,traceability matrix|gate decision,
\ No newline at end of file
+Test Architecture Enterprise,bmad-testarch-trace,Traceability,TR,Coverage traceability and gate.,,4-implementation,bmad-testarch-test-review,,,,,false,test_artifacts,traceability matrix|gate decision,
diff --git a/_bmad/_config/skill-manifest.csv b/_bmad/_config/skill-manifest.csv
index f91feb69..11d2d683 100644
--- a/_bmad/_config/skill-manifest.csv
+++ b/_bmad/_config/skill-manifest.csv
@@ -11,18 +11,6 @@ canonicalId,name,description,module,path,install_to_bmad
 "bmad-review-adversarial-general","bmad-review-adversarial-general","Perform a Cynical Review and produce a findings report. Use when the user requests a critical review of something","core","_bmad/core/bmad-review-adversarial-general/SKILL.md","true"
 "bmad-review-edge-case-hunter","bmad-review-edge-case-hunter","Walk every branching path and boundary condition in content, report only unhandled edge cases. Orthogonal to adversarial review - method-driven not attitude-driven. Use when you need exhaustive edge-case analysis of code, specs, or diffs.","core","_bmad/core/bmad-review-edge-case-hunter/SKILL.md","true"
 "bmad-shard-doc","bmad-shard-doc","Splits large markdown documents into smaller, organized files based on level 2 (default) sections. Use if the user says perform shard document","core","_bmad/core/bmad-shard-doc/SKILL.md","true"
-"bmad-advanced-elicitation","bmad-advanced-elicitation","Push the LLM to reconsider, refine, and improve its recent output.","core","_bmad/core/skills/bmad-advanced-elicitation/SKILL.md","true"
-"bmad-brainstorming","bmad-brainstorming","Facilitate interactive brainstorming sessions using diverse creative techniques and ideation methods. Use when the user says help me brainstorm or help me ideate.","core","_bmad/core/skills/bmad-brainstorming/SKILL.md","true"
-"bmad-distillator","bmad-distillator","Lossless LLM-optimized compression of source documents. Use when the user requests to 'distill documents' or 'create a distillate'.","core","_bmad/core/skills/bmad-distillator/SKILL.md","true"
-"bmad-editorial-review-prose","bmad-editorial-review-prose","Clinical copy-editor that reviews text for communication issues. Use when user says review for prose or improve the prose","core","_bmad/core/skills/bmad-editorial-review-prose/SKILL.md","true"
-"bmad-editorial-review-structure","bmad-editorial-review-structure","Structural editor that proposes cuts, reorganization, and simplification while preserving comprehension. Use when user requests structural review or editorial review of structure","core","_bmad/core/skills/bmad-editorial-review-structure/SKILL.md","true"
-"bmad-help","bmad-help","Analyzes current state and user query to answer BMad questions or recommend the next workflow or agent. Use when user says what should I do next, what do I do now, or asks a question about BMad","core","_bmad/core/skills/bmad-help/SKILL.md","true"
-"bmad-index-docs","bmad-index-docs","Generates or updates an index.md to reference all docs in the folder. Use if user requests to create or update an index of all files in a specific folder","core","_bmad/core/skills/bmad-index-docs/SKILL.md","true"
-"bmad-party-mode","bmad-party-mode","Orchestrates group discussions between all installed BMAD agents, enabling natural multi-agent conversations. Use when user requests party mode.","core","_bmad/core/skills/bmad-party-mode/SKILL.md","true"
-"bmad-review-adversarial-general","bmad-review-adversarial-general","Perform a Cynical Review and produce a findings report. Use when the user requests a critical review of something","core","_bmad/core/skills/bmad-review-adversarial-general/SKILL.md","true"
-"bmad-review-edge-case-hunter","bmad-review-edge-case-hunter","Walk every branching path and boundary condition in content, report only unhandled edge cases. Orthogonal to adversarial review - method-driven not attitude-driven. Use when you need exhaustive edge-case analysis of code, specs, or diffs.","core","_bmad/core/skills/bmad-review-edge-case-hunter/SKILL.md","true"
-"bmad-shard-doc","bmad-shard-doc","Splits large markdown documents into smaller, organized files based on level 2 (default) sections. Use if the user says perform shard document","core","_bmad/core/skills/bmad-shard-doc/SKILL.md","true"
-"bmad-create-prd","bmad-create-prd","Create a PRD from scratch. Use when the user says ""lets create a product requirements document"" or ""I want to create a new PRD""","core","_bmad/core/tasks/bmad-create-prd/SKILL.md","true"
 "bmad-tea","bmad-tea","Master Test Architect and Quality Advisor. Use when the user asks to talk to Murat or requests the Test Architect.","tea","_bmad/tea/agents/bmad-tea/SKILL.md","true"
 "bmad-teach-me-testing","bmad-teach-me-testing","Teach testing progressively through structured sessions. Use when user says ""lets learn testing"" or ""I want to study test practices""","tea","_bmad/tea/workflows/testarch/bmad-teach-me-testing/SKILL.md","true"
 "bmad-testarch-atdd","bmad-testarch-atdd","Generate failing acceptance tests using TDD cycle. Use when the user says ""lets write acceptance tests"" or ""I want to do ATDD""","tea","_bmad/tea/workflows/testarch/bmad-testarch-atdd/SKILL.md","true"
diff --git a/_bmad/bmm/module-help.csv b/_bmad/bmm/module-help.csv
index 8e34473c..d508623b 100644
--- a/_bmad/bmm/module-help.csv
+++ b/_bmad/bmm/module-help.csv
@@ -23,7 +23,7 @@ BMad Method,bmad-check-implementation-readiness,Check Implementation Readiness,I
 BMad Method,bmad-sprint-planning,Sprint Planning,SP,Kicks off implementation by producing a plan the implementation agents will follow in sequence for every story.,,4-implementation,,,true,implementation_artifacts,sprint status
 BMad Method,bmad-sprint-status,Sprint Status,SS,Anytime: Summarize sprint status and route to next workflow.,,4-implementation,bmad-sprint-planning,,false,,
 BMad Method,bmad-create-story,Create Story,CS,"Story cycle start: Prepare first found story in the sprint plan that is next or a specific epic/story designation.",create,,4-implementation,bmad-sprint-planning,bmad-create-story:validate,true,implementation_artifacts,story
-BMad Method,bmad-create-story,Validate Story,VS,Validates story readiness and completeness before development work begins.,validate,,4-implementation,bmad-create-story:create,bmad-dev-story,false,implementation_artifacts,story validation report
+BMad Method,bmad-create-story,Validate Story,VS,Validates story readiness and completeness before development work begins.,validate,,4-implementation,bmad-create-story:create,,false,implementation_artifacts,story validation report
 BMad Method,bmad-dev-story,Dev Story,DS,Story cycle: Execute story implementation tasks and tests then CR then back to DS if fixes needed.,,4-implementation,bmad-create-story:validate,,true,,
 BMad Method,bmad-code-review,Code Review,CR,Story cycle: If issues back to DS if approved then next CS or ER if epic complete.,,4-implementation,bmad-dev-story,,false,,
 BMad Method,bmad-qa-generate-e2e-tests,QA Automation Test,QA,Generate automated API and E2E tests for implemented code. NOT for code review or story validation — use CR for that.,,4-implementation,bmad-dev-story,,false,implementation_artifacts,test suite