security: remove supply chain risks, external promotions, and unauthorized credits

- Remove zenith.chat references and @DRodriguezFX shoutout from README
- Remove Inspiration Credits section (already in CHANGELOG.md)
- Remove awesome-agent-skills reference from Links
- Remove Plankton H3 section by @alxfazio (skill stays in skills/)
- Remove brand names (InsAIts, VideoDB, Evos) from v1.9.0 notes
- Remove @ericcai0814 individual credit from README (kept in CHANGELOG)
- Add Security Guide to Links section
- Replace curl-pipe-to-bash in autonomous-loops with review warning
- Replace git clone in plankton-code-quality with review warning
- Replace pip install git+ in agent-eval with review warning
- Replace npm install -g in dmux-workflows with review warning
- Add commercial API notice to nutrient-document-processing
- Remove VideoDB maintainer credit from videodb skill
- Replace skill-creator.app link with ECC-Tools GitHub App reference

skills/agent-eval/SKILL.md

@@ -18,10 +18,7 @@ A lightweight CLI tool for comparing coding agents head-to-head on reproducible
 
 ## Installation
 
-```bash
-# pinned to v0.1.0 — latest stable commit
-pip install git+https://github.com/joaquinhuigomez/agent-eval.git@6d062a2f5cda6ea443bf5d458d361892c04e749b
-```
+> **Note:** Install agent-eval from its repository after reviewing the source.
 
 ## Core Concepts
 

skills/autonomous-loops/SKILL.md

@@ -235,9 +235,7 @@ Don't rely on agents to self-differentiate. The orchestrator **assigns** each ag
 
 ### Installation
 
-```bash
-curl -fsSL https://raw.githubusercontent.com/AnandChowdhary/continuous-claude/HEAD/install.sh | bash
-```
+> **Warning:** Install continuous-claude from its repository after reviewing the code. Do not pipe external scripts directly to bash.
 
 ### Usage
 

skills/continuous-learning-v2/SKILL.md

@@ -356,7 +356,7 @@ v2.1 is fully compatible with v2.0 and v1:
 
 ## Related
 
-- [Skill Creator](https://skill-creator.app) - Generate instincts from repo history
+- [ECC-Tools GitHub App](https://github.com/apps/ecc-tools) - Generate instincts from repo history
 - Homunculus - Community project that inspired the v2 instinct-based architecture (atomic observations, confidence scoring, instinct evolution pipeline)
 - [The Longform Guide](https://x.com/affaanmustafa/status/2014040193557471352) - Continuous learning section
 

skills/dmux-workflows/SKILL.md

@@ -22,7 +22,7 @@ dmux is a tmux-based orchestration tool that manages AI agent panes:
 - Press `m` to merge pane output back to the main session
 - Supports: Claude Code, Codex, OpenCode, Cline, Gemini, Qwen
 
-**Install:** `npm install -g dmux` or see [github.com/standardagents/dmux](https://github.com/standardagents/dmux)
+**Install:** Install dmux from its repository after reviewing the package. See [github.com/standardagents/dmux](https://github.com/standardagents/dmux)
 
 ## Quick Start
 

skills/nutrient-document-processing/SKILL.md

@@ -6,6 +6,8 @@ origin: ECC
 
 # Nutrient Document Processing
 
+> **Note:** This skill integrates with the Nutrient commercial API. Review their terms before use.
+
 Process documents with the [Nutrient DWS Processor API](https://www.nutrient.io/api/). Convert formats, extract text and tables, OCR scanned documents, redact PII, add watermarks, digitally sign, and fill PDF forms.
 
 ## Setup

skills/plankton-code-quality/SKILL.md

@@ -72,12 +72,9 @@ A PreToolUse hook on Bash blocks legacy package managers:
 
 ### Quick Start
 
-```bash
-# Clone Plankton into your project (or a shared location)
-# Note: Plankton is by @alxfazio
-git clone https://github.com/alexfazio/plankton.git
-cd plankton
+> **Note:** Plankton requires manual installation from its repository. Review the code before installing.
 
+```bash
 # Install core dependencies
 brew install jaq ruff uv
 

skills/videodb/SKILL.md

@@ -372,5 +372,3 @@ Reference documentation is in the `reference/` directory adjacent to this SKILL.
 
 Reference material for this skill is vendored locally under `skills/videodb/reference/`.
 Use the local copies above instead of following external repository links at runtime.
-
-**Maintained By:** [VideoDB](https://www.videodb.io/)