For a suspected security issue, email doug@ensodynamics.com. Do not disclose credentials, confidential project data or an exploitable vulnerability in a public GitHub issue.

Include the plugin version or commit, the affected skill, what you asked the agent to do, and the unexpected behavior. Redact sensitive information and provide the minimum information needed to reproduce the issue.

Reports are investigated with reasonable care. There is no guaranteed response time or bug bounty. The current published version is the supported version; security fixes are published in this repository.