Security

SECURITY.md

Security Policy

Supported versions

Only the latest commit on the main branch is actively maintained.

Reporting a vulnerability

Please do not open a public GitHub issue for security vulnerabilities.

Report them privately via GitHub's Security Advisories feature.

Include:

A description of the vulnerability
Steps to reproduce
Potential impact

We aim to respond within 5 business days.

Notes

Do not include hardcoded credentials, API keys, or internal URLs in skills or agents.
All contributed code is reviewed before merging to main.

There aren't any published security advisories