Security reports are assessed against the latest stable release. Fixes for older versions are not guaranteed; update to the latest release before reporting when possible.
Do not open a public Issue for a vulnerability. Use GitHub private vulnerability reporting. If the feature is unavailable, send @akkiee76 a direct message requesting a secure contact method. Do not include vulnerability details in the message or disclose them publicly.
Include the affected revision, impact, reproduction conditions, and the smallest safe proof of concept. Do not include credentials, personal data, or private third-party source code.
This project is an instruction package and does not grant an agent additional permissions. Reports about an agent action should distinguish the skill's instructions from the host product's permissions and approval settings.