diff --git a/.github/workflows/publish-skills.yml b/.github/workflows/publish-skills.yml
index a6719832..35214380 100644
--- a/.github/workflows/publish-skills.yml
+++ b/.github/workflows/publish-skills.yml
@@ -21,6 +21,8 @@ concurrency:
 
 jobs:
   publish:
+    # Skip fork PRs — secrets (CLAWHUB_TOKEN) are not available
+    if: github.event.pull_request.head.repo.full_name == github.repository || github.event_name != 'pull_request'
     runs-on: ubuntu-latest
     permissions:
       contents: read