(a) lib/present/modes/read.ts:57, read-article.ts:188, js/runtime.ts:106 embed JSON.stringify directly in script templates. Values are slug/selector charset-constrained (likely safe) but violate the v0.4.0 rule: inline script embeds use jsonForScript, never bare JSON.stringify. Normalize all three. (b) Nobody has executed a fresh /plugin install against the ref-pinned marketplace (athanor@1.1.1 → grimoire v0.5.0) — needs one interactive Claude Code session to confirm the pin resolves and skills load. The last untested install path shipped v0.2.0 to strangers for a month.
(a) lib/present/modes/read.ts:57, read-article.ts:188, js/runtime.ts:106 embed JSON.stringify directly in script templates. Values are slug/selector charset-constrained (likely safe) but violate the v0.4.0 rule: inline script embeds use jsonForScript, never bare JSON.stringify. Normalize all three. (b) Nobody has executed a fresh /plugin install against the ref-pinned marketplace (athanor@1.1.1 → grimoire v0.5.0) — needs one interactive Claude Code session to confirm the pin resolves and skills load. The last untested install path shipped v0.2.0 to strangers for a month.