Please do not report security vulnerabilities through public GitHub issues.

Use GitHub's private vulnerability reporting instead: open the Security tab of this repository and choose "Report a vulnerability". Include enough detail to reproduce the issue, and do not include real credentials or personal data.

This is an as-is research project maintained on a best-effort basis, so response times may vary.

Operators should review the documented data flows, browser isolation limits and least-privilege guidance in docs/privacy-threat-model.md before connecting a real Slack workspace or private repository.