The agent job is getting "contents: read" to access the agent file markdown.

[dsyme]

The agent job is always getting "contents: read" to access the agent file markdown, even if this is not declared in the permissions:...

This should not be needed - it should be possible to get the markdown in the activation job

[pelikhan]

Yes we should render the prompt in the action phase. However, not that contents: read will be needed for skills. It gets blurry.