Security

SECURITY.md

Security Policy

Supported Scope

This repository contains documentation, metadata, and scripts. Security reports are welcome for:

script vulnerabilities
unsafe automation patterns
malicious content pathways in contribution flow

Reporting A Vulnerability

Please report privately by opening a security advisory in GitHub or contacting maintainers directly.

When reporting, include:

affected file(s)
reproduction steps
expected safe behavior
potential impact

Response Targets

Initial triage: within 3 business days
Status update: within 7 business days
Remediation target: based on severity and impact

Disclosure

Please do not publish exploit details until maintainers confirm remediation or mitigations.

There aren't any published security advisories