Please do not disclose a suspected security issue in a public GitHub issue. Use GitHub's Security → Report a vulnerability workflow for this repository instead.

The plugin runs locally and does not require credentials, tokens, network services, or Teams API access. Release installers are attached to GitHub Releases for this repository.