Do not publish credentials, private URLs, private prompts, raw tool payloads, or exploit details in a public issue.

If GitHub private vulnerability reporting is enabled for this repository, use the repository's Security → Report a vulnerability entry. Otherwise, contact the repository owner privately before disclosing technical details. Include a concise description, affected version or commit, reproduction conditions, impact, and any redacted proof of concept.

Security reports may include exposed secrets, unsafe command execution, permission bypasses, data disclosure, supply-chain risks, or insecure defaults. Please redact secrets from all reports.