feat(builtins): add ReadNotifications and Workflow to known built-in tools

src/builtins.ts

@@ -21,6 +21,7 @@ export const BUILTIN_TOOLS: ReadonlySet<string> = new Set([
   "NotebookEdit",
   "PushNotification",
   "Read",
+  "ReadNotifications",
   "RemoteTrigger",
   "ScheduleWakeup",
   "SendMessage",
@@ -37,6 +38,7 @@ export const BUILTIN_TOOLS: ReadonlySet<string> = new Set([
   "ToolSearch",
   "WebFetch",
   "WebSearch",
+  "Workflow",
   "Write",
 ]);
 

test/builtins.test.ts

@@ -24,6 +24,14 @@ describe("builtins", () => {
     expect(BUILTIN_TOOLS.has("SendMessage")).toBe(true);
   });
 
+  it("BUILTIN_TOOLS includes ReadNotifications", () => {
+    expect(BUILTIN_TOOLS.has("ReadNotifications")).toBe(true);
+  });
+
+  it("BUILTIN_TOOLS includes Workflow", () => {
+    expect(BUILTIN_TOOLS.has("Workflow")).toBe(true);
+  });
+
   it("isMcpTool detects mcp__ prefix", () => {
     expect(isMcpTool("mcp__github__create_issue")).toBe(true);
     expect(isMcpTool("Read")).toBe(false);

test/checks.test.ts

@@ -1165,6 +1165,26 @@ describe("runChecks", () => {
     const d = ds.find((d) => d.rule === "model-unknown");
     expect(d?.message).toContain("us.claude-fable-6");
   });
+
+  it("does not flag ReadNotifications as an unknown tool", () => {
+    const s = mkSkill("/test/foo/SKILL.md", {
+      name: "foo",
+      description: "do the foo thing",
+      "allowed-tools": "ReadNotifications Read",
+    });
+    const ds = runChecks([s], config);
+    expect(ds.find((d) => d.rule === "tool-unknown")).toBeUndefined();
+  });
+
+  it("does not flag Workflow as an unknown tool", () => {
+    const s = mkSkill("/test/foo/SKILL.md", {
+      name: "foo",
+      description: "do the foo thing",
+      "allowed-tools": "Workflow",
+    });
+    const ds = runChecks([s], config);
+    expect(ds.find((d) => d.rule === "tool-unknown")).toBeUndefined();
+  });
 });
 
 describe("buildValidated", () => {