Security fixes are applied to the latest version on main.
Please do not open a public issue for undisclosed vulnerabilities.
Report privately through GitHub Security Advisories:
If GitHub private vulnerability reporting is unavailable for the repository, open a public issue only to request a private contact channel. Do not include exploit details, secrets, proof-of-concept code, or sensitive logs in that public issue.
Include:
- A clear description of the issue
- Reproduction steps or proof of concept
- Impact assessment (what an attacker can do)
- Any suggested mitigation
We will acknowledge receipt as soon as possible and work with you on validation, remediation, and coordinated disclosure timing.
This repository primarily contains plugin instructions/configuration plus a conversion/install CLI.
- Plugin instruction content itself does not run as a server process.
- Security/privacy behavior also depends on the host AI tool and any external integrations you explicitly invoke.
For data-handling details, see PRIVACY.md.