SSRF: Multiple SSRF fixes in the plugin proxy indicate a recurring weakness in validating user-controlled URLs and redirects.

Auth Bypass: The auto-login mechanism introduced a passwordless path that could be exploited to bypass authentication.

Credential Exposure / Auth Bypass: Embedding a GitHub token in git remote URLs exposed credentials in CI logs and enabled unauthorized pushes.