Use GitHub private vulnerability reporting. Include the affected package and CLI versions, minimal synthetic reproduction, expected boundary, and actual result. Do not post credentials, conversation data, provider output, or unpatched exploit details in public issues.

Use the latest 0.2 patch and a supported CLI version. This early connector has not had an independent security audit. Applications own account authorization, request and concurrency limits, host security, and their provider privacy policy.