If you discover a security vulnerability within this project, please follow these steps:

Security vulnerabilities should not be reported through public GitHub issues.

Send an email to: luissambrano.dev@gmail.com

Include:

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Suggested fix (if any)

• Initial Response: Within 48 hours
• Status Update: Within 7 days
• Resolution: Depends on severity

• We follow responsible disclosure practices
• Once a fix is released, we will credit the reporter
• We ask that you give us reasonable time to address the issue before public disclosure

When using this configuration:

1. Never commit secrets - Use environment variables
2. Review skills before use - Understand what each skill does
3. Keep updated - Pull latest changes regularly
4. Report suspicious behavior - If a skill behaves unexpectedly

This security policy applies to:

• The antigravity-config repository
• Skills provided in this repository
• Installation scripts

It does NOT cover:

• Third-party skills
• User modifications
• External dependencies

Thank you for helping keep Antigravity Config secure! 🔒