The repo safety notes say:

• If a template may act for you, read which accounts it can touch.
• Cookie sync, full-disk access, SSH, and tunnels are for low-sensitivity accounts, then turn them off.
• Do not paste keys, tokens, or billing screenshots into a prompt or a public repo.
• The list checks that a repo exists, its license, and relevance. It is not a security audit.

Recipe pages here keep the split of work and the human gate. Pasteable prompts stay in examples/ so this site does not fork them.