Report it privately. Open the repository's Security tab and choose Report a vulnerability. Never open a public issue for it.

Report here a flaw in this repository's own code: the port, the pstack command, the installer, and the workflows.

The skill text comes from cursor/plugins. If the flaw is in the text of an upstream skill, it belongs to that repository too. Say so in your report, so we can tell upstream.

Only the newest release gets fixes. pstack update moves an install to it.