Reorder permission blocks in agents to ensure the wildcard denial is
listed first, which is required for correct skill evaluation.
Update the permissions-update command documentation to clarify this
requirement.
Remove the gpt-oauth-prompt-enhancer plugin and disable the
gpt-oss-120b-medium model in the proxy configuration.
Apply research-backed formatting across all agents, commands, and
plugins to improve LLM precision. This update also replaces the
commands-md-updater agent with a new /sync-commands workflow.
- Add Security Reviewer with 10 new security skills.
- Split Vite-React expert into orchestrator and brain roles.
- Add /init and /refactor-rfc-xml commands.
- Update model references to GPT-5.2 and remove deprecated agents.
Convert markdown files to use XML-like tags for structure and adopt RFC
2119 keywords. Delete redundant generic agent definitions and update
coding guidelines to enforce stricter modularity, file size limits, and
barrel exports.