diff --git a/.gitignore b/.gitignore
index 4ea2280..d09e814 100644
--- a/.gitignore
+++ b/.gitignore
@@ -14,3 +14,17 @@ CUDA-Learn/cg_demo
 *.fatbin
 *.cubin
 *.ptx
+
+# OS-generated files
+.DS_Store
+Thumbs.db
+
+# Secrets and environment files
+.env
+.env.*
+!.env.example
+
+# Editor/IDE files
+*.swp
+*.swo
+*~
diff --git a/Cute-Learn/.DS_Store b/Cute-Learn/.DS_Store
deleted file mode 100644
index 5008ddf..0000000
Binary files a/Cute-Learn/.DS_Store and /dev/null differ
diff --git a/MySkills/.claude/skills/nsys-profile-fd/SKILL.md b/MySkills/.claude/skills/nsys-profile-fd/SKILL.md
index 7c0d1e7..962e8c6 100644
--- a/MySkills/.claude/skills/nsys-profile-fd/SKILL.md
+++ b/MySkills/.claude/skills/nsys-profile-fd/SKILL.md
@@ -28,7 +28,7 @@ report_dir    = /root/paddlejob/workspace/env_run/output/zhushengguang/jobspace/
 report_prefix = dsv32_5layer_cudagraph
 param_key     = use_cudagraph
 param_vals    = false,true
-wait_ip       = 10.95.239.139
+wait_ip       = <INTERNAL_IP>
 wait_port     = 8291
 nsys_session  = zsg
 ```
diff --git a/MySkills/.claude/skills/nsys-profile-fd/scripts/patch_config.sh b/MySkills/.claude/skills/nsys-profile-fd/scripts/patch_config.sh
index de4a326..f5781ca 100755
--- a/MySkills/.claude/skills/nsys-profile-fd/scripts/patch_config.sh
+++ b/MySkills/.claude/skills/nsys-profile-fd/scripts/patch_config.sh
@@ -21,8 +21,17 @@ if [ ! -f "$FILE" ]; then
     exit 1
 fi
 
+# Validate KEY: only allow alphanumeric chars and underscores
+if ! echo "$KEY" | grep -qE '^[A-Za-z_][A-Za-z0-9_]*$'; then
+    echo "错误: key 只允许字母、数字和下划线: $KEY" >&2
+    exit 1
+fi
+
+# Escape sed special characters in VAL (/, &, \)
+ESCAPED_VAL=$(printf '%s' "$VAL" | sed 's/[\/&\\]/\\&/g')
+
 # 替换 JSON 字段值（匹配 "key": 任意值，直到逗号或右花括号前）
-sed -i "s/\"${KEY}\":[[:space:]]*[^,}]*/\"${KEY}\":${VAL}/" "$FILE"
+sed -i "s/\"${KEY}\":[[:space:]]*[^,}]*/\"${KEY}\":${ESCAPED_VAL}/" "$FILE"
 
 # 验证替换结果
 RESULT=$(grep "\"${KEY}\"" "$FILE")