Security / 安全 中文 不要在仓库或 skill 包里提交密钥、token、cookie 或 private URLs。 如果发现漏洞、供应链风险或被污染的依赖，请通过 GitHub 私有漏洞报告 提交。 如果只能公开反馈，请使用 Issues，但不要贴敏感细节。 这个仓库不运行服务端程序，安全问题通常集中在仓库内容、发布包和提示词污染。 English Do not commit secrets, tokens, cookies, or private URLs to the repository or skill package. If you find a vulnerability, supply-chain risk, or contaminated dependency, report it through GitHub private vulnerability reporting. If you must file a public report, use Issues and avoid sensitive details. This repository does not run a service; security issues usually concern repository contents, release packaging, and prompt contamination.