Report vulnerabilities privately through GitHub Security Advisories. Do not open a public issue for an unpatched vulnerability, and do not include live credentials, private repository paths, instruction contents, configuration values, or unsanitized host output.
Only the latest release line receives security fixes. Agent Context Doctor is a read-only static resolver, not a sandbox, effective-prompt verifier, access-control system, or authorization boundary. Run it only on paths you are permitted to inspect.