Add /security:review and /security:fix with strict review/fix boundary

Fix prd-to-plan output path from ./plans/ to docs/plans/

Add SKILL.md body autopilot loop to skill-eval-toolkit

Update npm-safe-packages.txt comments to reflect CVE-check behavior

Add optional Codex review pass to prd-to-plan skill with eval fixtures

Add write-prd skill: bridge grill-me → prd-to-plan workflow gap

Harden npm supply chain defense: CVE-check whitelisted pkgs, block non-registry specifiers, fix download fail-open

Add allowlist-only mode and block global installs in npm supply chain defense

Update security-reviewer READMEs to reflect Fix-Verify Loop hardening

Harden Fix-Verify Loop with convergence controls inspired by Harness Engineering

Remove accidentally committed __pycache__ from skill-eval-toolkit

Add skill-eval-toolkit and refine write-a-skill boundary

Document .claude/ and .mcp.json as local-only gitignored files

Upgrade write-a-skill with eval-driven iteration model

Add English translations for all guides and README