Add SafeSkill security badge (89/100 — Passes with Notes)

[OyaAIProd]

⚠️ SafeSkill Security Scan Results

Metric	Value
Overall Score	89/100 (Passes with Notes)
Code Score	99/100
Content Score	73/100
Findings	12 findings detected (1 high)
Taint Flows	0
Files Scanned	0
Scan Duration	0.1s

Top Findings

• 🟠 high: Context boundary escape detected (fake-turn-marker): "User:" (research/automagic-knowledge-capture.md:116)
• 🟡 medium: Missing or invalid package.json (package.json:0)
• 🟡 medium: Indirect injection vector detected (raw-content-url): "https://raw.githubusercontent.com/punt-labs/quarry/3d10f24/install.sh" (README.md:18)
• 🟡 medium: Indirect injection vector detected (raw-content-url): "https://raw.githubusercontent.com/punt-labs/quarry/3d10f24/install.sh" (README.md:46)
• 🟡 medium: Indirect injection vector detected (fetch-instruction): "fetch URL" (research/automagic-knowledge-capture.md:63)

View full report on SafeSkill

---

This PR was automatically generated by SafeSkill — the security scanner for AI tools and MCP servers.

---

Note

Low Risk
Low risk documentation-only change that adds an external badge link; no runtime or security-sensitive code paths are modified.

Overview
Adds a new SafeSkill security scan badge to the top of README.md, linking to the project’s SafeSkill report and displaying the current score (89/100, Passes with Notes).

^{Written by Cursor Bugbot for commit af08630. This will update automatically on new commits. Configure here.}

[Copilot]

Pull request overview

Adds a SafeSkill security scan badge to the project README so visitors can quickly see the latest scan status and navigate to the full report.

Changes:

• Add a SafeSkill badge (89/100 — Passes with Notes) near the top of README.md.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.