diff --git a/.agents/skills/inkreach-teable/SKILL.md b/.agents/skills/inkreach-teable/SKILL.md
index a1af258..72c9e1d 100644
--- a/.agents/skills/inkreach-teable/SKILL.md
+++ b/.agents/skills/inkreach-teable/SKILL.md
@@ -5,15 +5,17 @@ description: >-
   automation engine). Configure tables, fields, records, views, and automations
   (8 triggers incl. recordCreated/Updated/Condition, formSubmitted, scheduledTime,
   buttonClick, webhook; 6 actions: script, sendEmail, httpRequest, createRecord,
-  updateRecord, getRecords), plus secrets and execution history. Trigger when the
-  user wants to manage tables/fields/records/views, build or configure
-  automations/workflows, set up button-field triggers, schedule jobs, create
-  webhooks, inspect run history, or troubleshoot a deployed inkreach-teable
-  instance - even without saying "inkreach-teable" but referencing Teable-style IDs
-  (bseXXX, tblXXX, fldXXX, recXXX, viwXXX, wflXXX) or ask to configure
-  tables/automation on the local/deployed instance. Also covers dev/deploy tasks
-  (build, restart systemd services). Uses the inkreach-teable CLI, which targets
-  the project's OWN automation contract (NOT the official teable CLI).
+  updateRecord, getRecords), plus secrets, execution history, and dynamic plugins
+  (install/uninstall, base-level mount nodes, developer whitelist, CSP apiOrigins).
+  Trigger when the user wants to manage tables/fields/records/views, build or
+  configure automations/workflows, set up button-field triggers, schedule jobs,
+  create webhooks, inspect run history, install or configure plugins, allow
+  developers to upload plugins, or troubleshoot a deployed inkreach-teable
+  instance - even without saying "inkreach-teable" but referencing Teable-style
+  IDs (bseXXX, tblXXX, fldXXX, recXXX, viwXXX, wflXXX) or ask to configure
+  tables/automation/plugins on the local/deployed instance. Also covers dev/deploy
+  tasks (build, restart systemd services). Uses the inkreach-teable CLI, which
+  targets the project's OWN automation contract (NOT the official teable CLI).
 ---
 
 # inkreach-teable operations
@@ -50,6 +52,7 @@ Respond in the user's language. Keep answers concise and action-oriented.
 | Execution History | Inspect run results / rerun failures | `runs list/get/rerun` | [cli-reference.md § runs](guides/cli-reference.md#runs) |
 | Manual Trigger | Test by firing button-click/webhook | `fire button-click`, `fire webhook` | [automation-guide.md § Testing](guides/automation-guide.md#testing--triggering) |
 | SQL | Read-only analytics, JOINs, aggregation | `sql <sql>` | [cli-reference.md § sql](guides/cli-reference.md#sql) |
+| Plugins | Install/manage dynamic plugins, developer whitelist, CSP | `plugin list/install/uninstall`, `plugin dev allow/revoke` | [cli-reference.md § plugin](guides/cli-reference.md#plugin) |
 | Dev/Deploy | Build, restart services, known gotchas | (systemd / pnpm build) | [development.md](guides/development.md) |
 
 ### 2.2 Routing Rules
@@ -67,6 +70,9 @@ Respond in the user's language. Keep answers concise and action-oriented.
 | Schedule recurring job | Trigger `scheduledTime` (only type+interval work) | Passing triggerTime/weekdays (backend ignores) |
 | Per-row AI / transformation | Action `script` reading `triggerInput` | Manual row-by-row via record API |
 | Send notification | Action `sendEmail` or `httpRequest` | — |
+| Add a custom UI / view / panel | Plugins: `plugin install --position base` | Manually editing DB rows |
+| Allow a user to upload plugins | Plugins: `plugin dev allow <userIdOrEmail>` (admin only) | — |
+| Plugin needs external API access | Plugins: declare `apiOrigins` in `plugin.json` manifest | Editing CSP in next.config.js (global) |
 | Read records for later writes | `record get` (returns record IDs) | `sql` (no record IDs returned) |
 | Analytics / aggregation / JOIN | `sql` with GROUP BY | Fetch all records + compute in code |
 | Store an API key for a script | `secret set` → read in script via `process.env.NAME` | Hardcoding in script code |