Report vulnerabilities privately through GitHub's private vulnerability reporting on this repository (Security > Report a vulnerability), not in a public issue.

In scope: the picker server, its HTTP routes, and how it starts agents, including permission and credential handling. Include the affected version, reproduction steps and expected impact. Never include API keys, tokens or other secrets.