Please do not disclose security-sensitive issues in a public GitHub issue.
Until a private reporting channel is configured, contact the repository owner through GitHub and request a private communication channel.
The current alpha:
- does not inject code into other processes;
- does not install a driver;
- does not save captured screen content;
- does not transmit captured screen content;
- runs with the current user's privileges;
- provides an emergency tray command to remove the overlay.
The current alpha has not yet completed a formal security review and must not be treated as production-ready assistive software.