Deserialization: Unsafe YAML loading in executor initialization is the highest severity risk; a prior bypass of tag sanitization required regex-based blocking, indicating this surface is prone to incomplete fixes.

Credential Exposure: Hardcoded default Docker Hub credentials were removed; any residual hardcoded secrets or fallback defaults could expose credentials.

Unsafe GitHub Actions Workflow Execution: Fork PRs could trigger steps that access secrets; step-level conditionals were added, but other workflows or jobs may still lack proper fork-safety guards.