Haris Chechi 5001cd5cec Fix critical command injection and multiple security/quality issues (#29) ...

- Fix command injection in summary.yml: replace shell gh command with
  actions/github-script to avoid shell interpolation of AI output
- Harden prompt injection defense with structural tag boundaries
- Add Zod validation for all LLM JSON output (schemas were a dependency
  but unused)
- Add CLI input validation with bounds checking for numeric flags and
  file size limit for --context
- Replace biased sort-based shuffle with Fisher-Yates in frame selection
- Add npm test to CI workflow
- Update actions/stale from v5 to v9 with real messages
- Fill in SECURITY.md with responsible disclosure policy

Co-authored-by: Haris Chechi <chechi@Hariss-Air.lan>
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-07-21 11:27:57 +05:30

..

ci.yml

Fix critical command injection and multiple security/quality issues (#29)

2026-07-21 11:27:57 +05:30

codeql.yml

Add CodeQL analysis workflow

2026-07-20 13:26:47 +05:30

dependency-review.yml

Add Dependency Review workflow for PRs

2026-07-20 13:26:16 +05:30

stale.yml

Fix critical command injection and multiple security/quality issues (#29)

2026-07-21 11:27:57 +05:30

summary.yml

Fix critical command injection and multiple security/quality issues (#29)

2026-07-21 11:27:57 +05:30