diff --git a/plugins/machine-health/.claude-plugin/plugin.json b/plugins/machine-health/.claude-plugin/plugin.json
index de8f48051..ce4afd05b 100644
--- a/plugins/machine-health/.claude-plugin/plugin.json
+++ b/plugins/machine-health/.claude-plugin/plugin.json
@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "machine-health",
-  "version": "0.12.8",
+  "version": "0.12.9",
   "description": "Workstation health audit: OS-specific checks (disk, OS updates, security posture, CISA KEV correlation) run from a versioned catalog with trend-aware severity, approval-gated remediations, and dated markdown reports. Windows fully implemented; macOS/Linux scaffolded (report UNKNOWN and stop). Machine state persists in the plugin data directory; the report directory and check catalog are configurable.",
   "author": {
     "name": "Melodic Software",
diff --git a/plugins/machine-health/CHANGELOG.md b/plugins/machine-health/CHANGELOG.md
index bb123a766..41ac24bbc 100644
--- a/plugins/machine-health/CHANGELOG.md
+++ b/plugins/machine-health/CHANGELOG.md
@@ -3,6 +3,14 @@
 All notable changes to the `machine-health` plugin are documented here. Format follows
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); this plugin uses semantic versioning.
 
+## [0.12.9]
+
+### Changed
+
+- **audit:** add `argument-hint: "[weekly|on-demand|first-run] [--dry-run]"` so
+  autocomplete shows the RunMode and dry-run arguments the skill already
+  accepts (#3542).
+
 ## [0.12.8]
 
 ### Changed
diff --git a/plugins/machine-health/skills/audit/SKILL.md b/plugins/machine-health/skills/audit/SKILL.md
index 95f8e0278..b8a2afa01 100644
--- a/plugins/machine-health/skills/audit/SKILL.md
+++ b/plugins/machine-health/skills/audit/SKILL.md
@@ -1,5 +1,6 @@
 ---
 description: "Audits local workstation health and emits a findings report: runs OS-specific checks (disk, OS updates, security posture, CISA KEV) from a versioned catalog with trend-aware severity; remediation only when pre-approved. Use when: 'machine health check', 'health check', 'audit my machine', 'system health', 'workstation audit', 'check my computer', 'run health check', 'workstation status report', or when a scheduled weekly routine fires. Outputs a dated markdown report; updates append-only history state. Windows fully implemented; macOS/Linux scaffolded (reports UNKNOWN and stops)."
+argument-hint: "[weekly|on-demand|first-run] [--dry-run]"
 user-invocable: true
 disable-model-invocation: false
 ---