Please report security issues privately to Ali Harb.
Do not open public issues for vulnerabilities involving prompt injection, unsafe agent instructions, secret exposure, package install behavior, or command execution risks.
Security-sensitive areas include:
- AI-agent instruction safety.
- Secret exposure.
- Prompt injection resistance.
- Install command behavior.
- Package validation and audit tooling.