diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
index 1f27599..9266a37 100644
--- a/.github/workflows/publish.yml
+++ b/.github/workflows/publish.yml
@@ -49,6 +49,11 @@ jobs:
         run: npm pack --dry-run
 
       - name: Publish to npm
-        run: npm publish --access public --provenance
+        run: |
+          if [ -z "$NODE_AUTH_TOKEN" ]; then
+            echo "NODE_AUTH_TOKEN is not configured; skipping npm publish."
+            exit 0
+          fi
+          npm publish --access public --provenance
         env:
           NODE_AUTH_TOKEN: ${{ secrets.NODE_AUTH_TOKEN }}
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 31f556f..205b0b2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,11 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+### Changed
+
+- Docs: install from GitHub instead of npm.
+- CI: publish skips without a configured token.
+
 ## [0.2.0] - 2026-09-24
 
 ### Added
diff --git a/README.md b/README.md
index c409a10..aa9504f 100644
--- a/README.md
+++ b/README.md
@@ -1,6 +1,6 @@
 # pi-rules
 
-[![ci](https://github.com/code-yeongyu/pi-rules/actions/workflows/ci.yml/badge.svg)](https://github.com/code-yeongyu/pi-rules/actions/workflows/ci.yml) [![license: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE) [![npm](https://img.shields.io/badge/npm-%40code--yeongyu%2Fpi--rules-red)](https://www.npmjs.com/package/@code-yeongyu/pi-rules)
+[![ci](https://github.com/code-yeongyu/pi-rules/actions/workflows/ci.yml/badge.svg)](https://github.com/code-yeongyu/pi-rules/actions/workflows/ci.yml) [![license: MIT](https://img.shields.io/badge/license-MIT-blue.svg)](LICENSE)
 
 Rule context loader for the [pi coding agent](https://github.com/badlogic/pi-mono/tree/main/packages/coding-agent). Discovers rule files from `.pi/rules/`, `.omo/rules/`, `.claude/rules/`, `.cursor/rules/`, `.github/instructions/`, `AGENTS.md`, `CLAUDE.md`, and injects them into the agent context.
 
@@ -34,17 +34,15 @@ The package targets the [`pi`](https://github.com/badlogic/pi-mono/tree/main/pac
 Pick whichever route fits:
 
 ```bash
-# 1. From npm (once published)
-pi install npm:@code-yeongyu/pi-rules
-
-# 2. From git (once the repository is pushed)
+# 1. From git
 pi install git:github.com/code-yeongyu/pi-rules
+senpi install git:github.com/code-yeongyu/pi-rules
 
-# 3. Manual placement (always works)
+# 2. Manual placement
 git clone https://github.com/code-yeongyu/pi-rules ~/.pi/agent/extensions/pi-rules
 cd ~/.pi/agent/extensions/pi-rules && npm install
 
-# 4. Dev / one-shot test
+# 3. Dev / one-shot test
 pi -e /path/to/pi-rules/src/index.ts
 ```