Jobsmith handles resumes, job-search history, API keys, and AI prompts locally. Please do not post private resumes, API keys, phone numbers, email addresses, or employer-confidential data in public issues.

If you find a vulnerability, open a GitHub issue with the minimum safe reproduction details, or contact the maintainer privately if public disclosure would expose user data or secrets.

When reporting, include:

• Affected version or commit
• Reproduction steps
• Impact
• Relevant logs with secrets removed

Security fixes are expected to target the latest GitHub release and the main branch.