Arabic AI Skills v1.2.3
A final hardening release focused on safer agent behavior, SDK privacy, reproducible packaging, and durable project documentation.
Security and privacy
- Both skills now treat supplied copy, files, and interface artifacts as untrusted data rather than governing instructions.
- The optional Node.js SDK bounds all text inputs before making an API request.
- OpenAI response storage is disabled by default; callers can explicitly opt in with
store: true. - Product context is serialized as data with an explicit instruction boundary.
Reliability
- Distribution ZIP names and contents now derive from the same committed revision.
- Packaging tests verify that both skills are present and large demo media is excluded.
- CI documentation now links to the canonical workflow instead of duplicating action revisions that can become stale.
- Marketing and compatibility language now matches the evidence published in the repository.
Verification
- 10 automated tests pass.
- Node.js 22 and 24 CI matrix.
- TypeScript type checking, Biome linting, schema/plugin/benchmark validation, CodeQL, and Dependabot.
npm audit: 0 vulnerabilities.
See CHANGELOG.md for details.