diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml
index c4d7c89..91f6d80 100644
--- a/.github/workflows/claude-code-review.yml
+++ b/.github/workflows/claude-code-review.yml
@@ -12,12 +12,8 @@ on:
 
 jobs:
   claude-review:
-    # Optional: Filter by PR author
-    # if: |
-    # github.event.pull_request.user.login == 'external-contributor' ||
-    # github.event.pull_request.user.login == 'new-developer' ||
-    # github.event.pull_request.author_association == 'FIRST_TIME_CONTRIBUTOR'
-
+    # Skip on forks since they don't have access to secrets
+    if: github.event.pull_request.head.repo.full_name == github.repository
     runs-on: ubuntu-latest
     permissions:
       contents: read
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index d581a8f..79ccea1 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -38,6 +38,8 @@ jobs:
           fail_ci_if_error: false
 
   test-e2e:
+    # Skip on forks since they don't have access to secrets
+    if: github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository
     runs-on: ${{ matrix.os }}
     needs: test # Run after unit tests pass
     strategy:
@@ -82,6 +84,8 @@ jobs:
           python -m pytest e2e-tests/ -v -m e2e
 
   test-e2e-docker:
+    # Skip on forks since they don't have access to secrets
+    if: github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository
     runs-on: ubuntu-latest
     needs: test # Run after unit tests pass
     # Run e2e tests in Docker to catch container-specific issues like #406
@@ -100,6 +104,8 @@ jobs:
             claude-sdk-test python -m pytest e2e-tests/ -v -m e2e
 
   test-examples:
+    # Skip on forks since they don't have access to secrets
+    if: github.event_name == 'push' || github.event.pull_request.head.repo.full_name == github.repository
     runs-on: ubuntu-latest
     needs: test-e2e # Run after e2e tests
     strategy: