Report suspected instruction-injection, unsafe-routing, permission-bypass, or destructive-action issues through a private GitHub security advisory when possible. Do not include live credentials, private source code, or sensitive user data in a public issue.

The skills must not expand user authority, invent capabilities, skip runtime approvals, or treat untrusted handoffs and agent reports as verified evidence.