Highlights
- Rebuilt the project page with a real workflow preview, three inspectable examples, current Agent Skill installation and direct downloads.
- Added credential-free public read-only operation and approval gates for every GitHub write.
- Removed unsafe home-directory Token discovery, Token printing guidance and public vulnerability disclosure.
- Updated authentication for official GitHub OAuth/MCP, authenticated GitHub CLI and least-privilege fine-grained PAT fallback.
- Added CI, a local validator, agent metadata, repository metadata and contributor attribution.
Verification
Local validation, YAML parsing, privacy/history scans, clean-clone validation, PR CI and main-branch CI all passed.