Security Report vulnerabilities privately to Team Deepiri security contacts Bedd treats skill WASM as untrusted: no filesystem/network imports in v1 ABI Do not put secrets in tinder JSON; use env / k8s secrets for URLs and tokens