cli2openai is designed to listen on 127.0.0.1. Do not bind it to a public interface: the OpenAI-compatible endpoint has no authentication and can launch local CLI processes.

The Claude backend creates .claude-clean/ at runtime and symlinks the local Claude Code OAuth credential file into it. This directory is ignored by Git and must never be copied, archived, or uploaded. Claude calls use --no-session-persistence; Codex calls use --ephemeral. PaperBridge stores SSH preferences inside Zotero; it does not bundle them in the XPI.

Before publishing a fork, verify that none of these are tracked:

• .claude-clean/, .env*, credentials, private keys, or shell history;
• zotero_jobs/, PDFs, generated outputs, or logs;
• personal paths, usernames, email addresses, private hosts, or IP addresses.

Use git grep and a secret scanner such as Gitleaks before every release. Report vulnerabilities through GitHub private vulnerability reporting instead of a public issue.