diff --git a/docs/concepts/model-providers.md b/docs/concepts/model-providers.md
index d9d2fe0c39c..a32ddd11d72 100644
--- a/docs/concepts/model-providers.md
+++ b/docs/concepts/model-providers.md
@@ -186,14 +186,14 @@ Moonshot uses OpenAI-compatible endpoints, so configure it as a custom provider:
 
 Kimi K2 model IDs:
 
-{/_ moonshot-kimi-k2-model-refs:start _/}
+[//]: # "moonshot-kimi-k2-model-refs:start"
 
 - `moonshot/kimi-k2.5`
 - `moonshot/kimi-k2-0905-preview`
 - `moonshot/kimi-k2-turbo-preview`
 - `moonshot/kimi-k2-thinking`
 - `moonshot/kimi-k2-thinking-turbo`
-  {/_ moonshot-kimi-k2-model-refs:end _/}
+  [//]: # (moonshot-kimi-k2-model-refs:end)
 
 ```json5
 {
diff --git a/docs/providers/moonshot.md b/docs/providers/moonshot.md
index 1d31e41bb22..03a8402cdee 100644
--- a/docs/providers/moonshot.md
+++ b/docs/providers/moonshot.md
@@ -15,14 +15,14 @@ Kimi Coding with `kimi-coding/k2p5`.
 
 Current Kimi K2 model IDs:
 
-{/_ moonshot-kimi-k2-ids:start _/}
+[//]: # "moonshot-kimi-k2-ids:start"
 
 - `kimi-k2.5`
 - `kimi-k2-0905-preview`
 - `kimi-k2-turbo-preview`
 - `kimi-k2-thinking`
 - `kimi-k2-thinking-turbo`
-  {/_ moonshot-kimi-k2-ids:end _/}
+  [//]: # (moonshot-kimi-k2-ids:end)
 
 ```bash
 openclaw onboard --auth-choice moonshot-api-key
diff --git a/docs/tools/exec-approvals.md b/docs/tools/exec-approvals.md
index 7a590713bb0..f1fd4dc4a59 100644
--- a/docs/tools/exec-approvals.md
+++ b/docs/tools/exec-approvals.md
@@ -160,13 +160,13 @@ Long options are validated fail-closed in safe-bin mode: unknown flags and ambig
 abbreviations are rejected.
 Denied flags by safe-bin profile:
 
-{/_ SAFE_BIN_DENIED_FLAGS:START _/}
+[//]: # "SAFE_BIN_DENIED_FLAGS:START"
 
 - `grep`: `--dereference-recursive`, `--directories`, `--exclude-from`, `--file`, `--recursive`, `-R`, `-d`, `-f`, `-r`
 - `jq`: `--argfile`, `--from-file`, `--library-path`, `--rawfile`, `--slurpfile`, `-L`, `-f`
 - `sort`: `--compress-program`, `--files0-from`, `--output`, `--random-source`, `--temporary-directory`, `-T`, `-o`
 - `wc`: `--files0-from`
-  {/_ SAFE_BIN_DENIED_FLAGS:END _/}
+  [//]: # (SAFE_BIN_DENIED_FLAGS:END)
 
 Safe bins also force argv tokens to be treated as **literal text** at execution time (no globbing
 and no `$VARS` expansion) for stdin-only segments, so patterns like `*` or `$HOME/...` cannot be
diff --git a/scripts/sync-moonshot-docs.ts b/scripts/sync-moonshot-docs.ts
index 9772524ae0d..f4d86e12f19 100644
--- a/scripts/sync-moonshot-docs.ts
+++ b/scripts/sync-moonshot-docs.ts
@@ -90,8 +90,8 @@ async function syncMoonshotDocs() {
   let moonshotText = await readFile(moonshotDoc, "utf8");
   moonshotText = replaceBlockLines(
     moonshotText,
-    "{/* moonshot-kimi-k2-ids:start */}",
-    "{/* moonshot-kimi-k2-ids:end */}",
+    '[//]: # "moonshot-kimi-k2-ids:start"',
+    "[//]: # (moonshot-kimi-k2-ids:end)",
     renderKimiK2Ids(""),
   );
   moonshotText = replaceBlockLines(
@@ -110,8 +110,8 @@ async function syncMoonshotDocs() {
   let conceptsText = await readFile(conceptsDoc, "utf8");
   conceptsText = replaceBlockLines(
     conceptsText,
-    "{/* moonshot-kimi-k2-model-refs:start */}",
-    "{/* moonshot-kimi-k2-model-refs:end */}",
+    '[//]: # "moonshot-kimi-k2-model-refs:start"',
+    "[//]: # (moonshot-kimi-k2-model-refs:end)",
     renderKimiK2Ids("moonshot/"),
   );
 
diff --git a/src/infra/exec-safe-bin-policy.test.ts b/src/infra/exec-safe-bin-policy.test.ts
index 0bc49177d40..d0dd5da48f9 100644
--- a/src/infra/exec-safe-bin-policy.test.ts
+++ b/src/infra/exec-safe-bin-policy.test.ts
@@ -10,8 +10,8 @@ import {
   validateSafeBinArgv,
 } from "./exec-safe-bin-policy.js";
 
-const SAFE_BIN_DOC_DENIED_FLAGS_START = "{/* SAFE_BIN_DENIED_FLAGS:START */}";
-const SAFE_BIN_DOC_DENIED_FLAGS_END = "{/* SAFE_BIN_DENIED_FLAGS:END */}";
+const SAFE_BIN_DOC_DENIED_FLAGS_START = '[//]: # "SAFE_BIN_DENIED_FLAGS:START"';
+const SAFE_BIN_DOC_DENIED_FLAGS_END = "[//]: # (SAFE_BIN_DENIED_FLAGS:END)";
 
 function buildDeniedFlagArgvVariants(flag: string): string[][] {
   const value = "blocked";