Avoid installing a mutable CLI release automatically from the public skill

Nobody has claimed this yet.

The public skill instructs agents to run `npm install -g @manaflow-ai/cloudrouter` at the start of every task. This resolves the mutable latest package with no version, integrity, or signature pin and runs package install scripts with the user's account. The skill also handles cloud and browser credentials, so a compromised release would have a high impact.

Please pin a reviewed CLI version or lockfile, verify package integrity, and make upgrades explicit and auditable rather than an unconditional latest install. Document the credential and network scope in SECURITY.md. The contribution-policy decision is tracked separately in https://github.com/manaflow-ai/cloudrouter/issues/2.

Start by locating the public skill instruction that runs `npm install -g @manaflow-ai/cloudrouter`, then inspect SECURITY.md and the package-install flow it describes. Define the reviewed version, integrity or signature verification, and explicit upgrade behavior, and document the credential and network scope in SECURITY.md; done means the unconditional mutable install is gone and the security guidance is present.

Written by the indexing model from the issue text.