The latest release of this plugin and the hosted Cavuno connector at https://mcp.cavuno.com/mcp/connector are supported.

Do not open a public issue for a suspected vulnerability.

Email hi@cavuno.com with:

• the affected skill, command or workflow;
• a clear description of the impact;
• reproduction steps or a minimal proof of concept; and
• any suggested remediation or disclosure deadline.

Do not include live API keys, OAuth tokens, customer data, or other credentials. Use synthetic data and revoke any credential accidentally exposed during testing.

We will acknowledge a report as soon as practical, keep you informed while it is investigated, and coordinate disclosure after a fix is available.

Testing must stay within accounts and boards you own or are authorized to use. Do not disrupt service, access other users' data, or use social engineering.