Repository navigation
v1.2.3
Security-posture housekeeping. No functional change to generated artifacts.
- Add
SECURITY.md. Documents the skill's two intentional external touch-points and why they are safe: the optional bring-your-own-bucket S3 publish helper (uploads to a bucket you own, then prints a link - never downloads or executes), and the optional client-side, version-pinned, self-gating Mermaid CDN import used only for live (non-shipped) diagrams. Gives human auditors and LLM-assisted skill scanners the rationale in-repo. - CI: bump
actions/checkout@v4to@v5in the release workflow; the v4 pin runs on the deprecated Node 20 runner.