added a comment to issue on heygen-com/hyperframes
Skills instruct agents to silently self-update via npx with no user confirmation; one script has an unreachable shell-injection shape
closed
issue on lrstanley/go-ytdlpbug: requested_subtitles fails to unmarshal (yt-dlp emits one subtitle object per language, not a list)
closed
issue on lrstanley/outline-exportbug: --extract fails with "failed to create file .... no such file or directory"