Haris Chechi 5001cd5cec Fix critical command injection and multiple security/quality issues (#29) ...

- Fix command injection in summary.yml: replace shell gh command with
  actions/github-script to avoid shell interpolation of AI output
- Harden prompt injection defense with structural tag boundaries
- Add Zod validation for all LLM JSON output (schemas were a dependency
  but unused)
- Add CLI input validation with bounds checking for numeric flags and
  file size limit for --context
- Replace biased sort-based shuffle with Fisher-Yates in frame selection
- Add npm test to CI workflow
- Update actions/stale from v5 to v9 with real messages
- Fill in SECURITY.md with responsible disclosure policy

Co-authored-by: Haris Chechi <chechi@Hariss-Air.lan>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-07-21 11:27:57 +05:30

..

ISSUE_TEMPLATE

Update issue templates

2026-05-26 18:03:29 +05:30

workflows

Fix critical command injection and multiple security/quality issues (#29)

2026-07-21 11:27:57 +05:30