diff --git a/.github/skill-review-waivers.v1.json b/.github/skill-review-waivers.v1.json
index 8263e502ce..115214d089 100644
--- a/.github/skill-review-waivers.v1.json
+++ b/.github/skill-review-waivers.v1.json
@@ -26,7 +26,8 @@
       "file_sha256": "sha256:43e3b8f80dbf69c343967ba77e268fae991d9fa3ed68b32a0ff02532cd48657f",
       "preapproved_file_sha256s": [
         "sha256:ea2521ba41c8fd16b2900758c890bb6c6d2b4b01da10b4a860facb8587ed0bde",
-        "sha256:f86a5c9a3339ae90ffd59635201d09f2c8019dc35b72e517228d31d6b3e1912c"
+        "sha256:f86a5c9a3339ae90ffd59635201d09f2c8019dc35b72e517228d31d6b3e1912c",
+        "sha256:bd7bc409540265f91eac3f2c82e104b6db0e0aeb12b3aa7ef4d79116cff8791b"
       ],
       "reason": "Required Claude CLI invocation uses a fixed executable, an argv list, captured output streams, and shell=False.",
       "expires_on": "2027-02-28"
diff --git a/backend/tests/test_skill_review_waivers.py b/backend/tests/test_skill_review_waivers.py
index c06ce37e02..7d20f21f41 100644
--- a/backend/tests/test_skill_review_waivers.py
+++ b/backend/tests/test_skill_review_waivers.py
@@ -106,6 +106,7 @@ def test_committed_manifest_matches_schema_and_strict_parser() -> None:
     assert parsed.waivers[1].preapproved_file_sha256s == (
         "sha256:ea2521ba41c8fd16b2900758c890bb6c6d2b4b01da10b4a860facb8587ed0bde",
         "sha256:f86a5c9a3339ae90ffd59635201d09f2c8019dc35b72e517228d31d6b3e1912c",
+        "sha256:bd7bc409540265f91eac3f2c82e104b6db0e0aeb12b3aa7ef4d79116cff8791b",
     )