If you discover a security vulnerability in Dark Agent, please report it responsibly.

1. Do NOT create a public GitHub issue

2. Email security details privately

3. Include:

   • Description of vulnerability
   • Steps to reproduce
   • Potential impact
   • Suggested fix (optional)

4. We will:

   • Acknowledge receipt within 48 hours
   • Provide timeline for fix
   • Credit reporters (if desired)

• Dark Agent core functionality
• API endpoints
• Docker deployment
• Configuration handling

• Social engineering
• Physical security
• Denial of service (unless severe)

Thank you for helping keep Dark Agent secure!