trust-and-safety-reviewlisted

# Trust and Safety Review Review how people can misuse the project's content and interaction flows to harm others, including when the software works as designed. Ground the review in the actual product, audience, and existing controls. This skill has no required stack, runtime, hosting provider, browser, or tool. It can review source code, product designs, API contracts, CLI workflows, or a running application using the access already available. ## Scope and routing - Cover user-controlled profiles, forms, surveys, messages, uploads, links, listings, invitations, and other content or interactions that the project actually supports. Public publishing is not a prerequisite. - Review harmful use, exposure, distribution, consent, and the moderation lifecycle. A legitimate form used to solicit passwords is a trust-and-safety concern. Script execution through that form is an application security concern. - Route technical vulnerabilities such as injection, authentication bypass, or unauthorized API access to `app-security-review` when available. Neither skill requires the other to be installed. - When a problem spans both domains, explain the connection and avoid duplicate findings. Stay within the requested review scope; flag an adjacent issue briefly without silently starting another audit. - A review produces findings and recommendations. Apply fixes or change moderation settings only when the user's request also authorizes those actions. ## Understand the current