Report vulnerabilities privately through GitHub Security Advisories for this repository.

The packaged Skills are inert Markdown and resources. The optional atlascloud-mcp row is disabled by default because enabling a stdio MCP server starts trusted code outside the agent sandbox. Review the pinned package and set credentials only in the process that starts DeepSeek Harness.