closed
issue on lrstanley/go-ytdlpbug: GetExtractedInfo() returns nothing for --dump-single-json output (checkJSON not enabled for DumpSingleJSON)
added a comment to issue on heygen-com/hyperframes
Skills instruct agents to silently self-update via npx with no user confirmation; one script has an unreachable shell-injection shape