added a comment to issue on heygen-com/hyperframes
Skills instruct agents to silently self-update via npx with no user confirmation; one script has an unreachable shell-injection shape
closed
issue on lrstanley/go-ytdlpbug: requested_subtitles fails to unmarshal (yt-dlp emits one subtitle object per language, not a list)