Safety decision 0106 · accepted

Reading the whole post and using browser cookies are separate opt-ins

yt-dlp only runs when you turn on "Read the whole post", always with hardening flags, and it reads Chrome cookies only if you allow that separately.

Decision

“Read the whole post” is off by default.
yt-dlp always runs with --ignore-config --no-plugin-dirs --no-exec, the URL after --, downloads capped at 200 MB, in a temp folder that is deleted afterwards.
“Use my Chrome login for posts that need it” is its own toggle, off by default, for Instagram posts that need a login.
claude, git and yt-dlp are resolved to absolute paths, and programs other users could replace are refused.