Report vulnerabilities privately to the HermeticOrmus maintainers (see org profile / funding contacts).

Do not file public issues with exploit details.

This suite is documentation and prompts for session handoff / pickup / absorb — not a network service. Still: never embed secrets in skills, templates, or examples.