diff --git a/skills/creating-sf-skill/references/section_guide.md b/skills/creating-sf-skill/references/section_guide.md
index cf97eb9..e75f16b 100644
--- a/skills/creating-sf-skill/references/section_guide.md
+++ b/skills/creating-sf-skill/references/section_guide.md
@@ -23,7 +23,7 @@ metadata:
   last_updated: "{YYYY-MM-DD}"
   compatibility: "Requires Salesforce CLI, Python 3.9+"
 license: Apache-2.0
-allowed-tools: Bash Read Write
+allowed-tools: Bash(sf project deploy start) Read Write
 ---
 ```
 
@@ -51,10 +51,10 @@ exclusions. The description must be 100-300 words with 5+ specific trigger phras
 ### allowed-tools Field
 
 Declares which tools the skill can access. This scopes the agent's tool use during
-skill execution:
+skill execution. Scope Bash to specific commands rather than blanket access:
 
 ```yaml
-allowed-tools: Bash Read Write
+allowed-tools: Bash(sf project deploy start) Read Write
 ```
 
 Include only the tools the skill actually needs. Common values: `Bash`, `Read`, `Write`,
diff --git a/skills/creating-sf-skill/templates/skill_template.md b/skills/creating-sf-skill/templates/skill_template.md
index c4e3f45..dbc29dc 100644
--- a/skills/creating-sf-skill/templates/skill_template.md
+++ b/skills/creating-sf-skill/templates/skill_template.md
@@ -9,11 +9,10 @@ license: LICENSE.txt has complete terms
 metadata:
   version: "1.0"
   stage: Draft
-  related-skills: "<skill1>, <skill2>"
   author: "<team-name>"
   last_updated: "<YYYY-MM-DD>"
   compatibility: "<REQUIRED_TOOLS_AND_ENVIRONMENT>"
-allowed-tools: <Bash Read Write — list only the tools the skill needs>
+allowed-tools: <list only the tools the skill needs, e.g. Bash(sf project deploy start) Read Write>
 ---
 
 # <Skill Title>