Improve Security

Own security-only repository audit. Apply runtime-trust.md and security-rubric.md. Return one report and change nothing. Resolve every relative link in this file against the directory containing this SKILL.md, never the plugin skills root.

Audit

No flag is the normal security route. --deep adds fresh independent refutation. --batch composes with either form and removes interaction only; it never grants target-command, mutation, or downstream authority.