diff --git a/.github/workflows/preview-smoke.yml b/.github/workflows/preview-smoke.yml
index a4f7a73..976882b 100644
--- a/.github/workflows/preview-smoke.yml
+++ b/.github/workflows/preview-smoke.yml
@@ -41,7 +41,10 @@ jobs:
       - name: Decide
         id: check
         run: |
-          if echo "${{ github.event.pull_request.body }}" | grep -qE 'pipeline:.*skip.*\bsmoke\b'; then
+          if [[ "${{ github.event.pull_request.head.repo.fork }}" == "true" ]]; then
+            echo "should_run=false" >> $GITHUB_OUTPUT
+            echo "::notice::Smoke skipped on fork PR (bypass secret unavailable to forks)"
+          elif echo "${{ github.event.pull_request.body }}" | grep -qE 'pipeline:.*skip.*\bsmoke\b'; then
             echo "should_run=false" >> $GITHUB_OUTPUT
             echo "::notice::Smoke skipped via pipeline directive"
           else
@@ -62,7 +65,8 @@ jobs:
         uses: patrickedqvist/wait-for-vercel-preview@v1.3.2
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
-          max_timeout: 600
+          max_timeout: 120
+          path: /?x-vercel-protection-bypass=${{ secrets.VERCEL_AUTOMATION_BYPASS_SECRET }}&x-vercel-set-bypass-cookie=true
 
       - uses: actions/setup-node@v4
         with:
@@ -78,6 +82,7 @@ jobs:
         run: npx playwright test --project=smoke
         env:
           BASE_URL: ${{ steps.vercel.outputs.url }}
+          VERCEL_AUTOMATION_BYPASS_SECRET: ${{ secrets.VERCEL_AUTOMATION_BYPASS_SECRET }}
 
       - name: Upload Playwright report on failure
         if: failure()
diff --git a/.github/workflows/visual-diff.yml b/.github/workflows/visual-diff.yml
index eec3606..8a12afa 100644
--- a/.github/workflows/visual-diff.yml
+++ b/.github/workflows/visual-diff.yml
@@ -37,7 +37,10 @@ jobs:
     steps:
       - id: check
         run: |
-          if echo "${{ github.event.pull_request.body }}" | grep -qE 'pipeline:.*skip.*\bvisual\b'; then
+          if [[ "${{ github.event.pull_request.head.repo.fork }}" == "true" ]]; then
+            echo "should_run=false" >> $GITHUB_OUTPUT
+            echo "::notice::Visual diff skipped on fork PR (bypass secret unavailable to forks)"
+          elif echo "${{ github.event.pull_request.body }}" | grep -qE 'pipeline:.*skip.*\bvisual\b'; then
             echo "should_run=false" >> $GITHUB_OUTPUT
             echo "::notice::Visual diff skipped via pipeline directive"
           else
@@ -58,7 +61,8 @@ jobs:
         uses: patrickedqvist/wait-for-vercel-preview@v1.3.2
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
-          max_timeout: 600
+          max_timeout: 120
+          path: /?x-vercel-protection-bypass=${{ secrets.VERCEL_AUTOMATION_BYPASS_SECRET }}&x-vercel-set-bypass-cookie=true
 
       - uses: actions/setup-node@v4
         with:
@@ -72,6 +76,7 @@ jobs:
         run: npx playwright test --project=visual --update-snapshots=none
         env:
           BASE_URL: ${{ steps.vercel.outputs.url }}
+          VERCEL_AUTOMATION_BYPASS_SECRET: ${{ secrets.VERCEL_AUTOMATION_BYPASS_SECRET }}
         continue-on-error: true
 
       - name: Upload screenshots + diffs