Report vulnerabilities privately to the repository owner. Do not post keys, private application content or unreviewed traces. This module does not execute model output. The caller reviews data before transmitting it to TypeSafe. Fixed HTTPS host, rejected redirects, bounded responses and sanitized network errors prevent accidental endpoint changes or echoing provider response bodies. The process environment contains the credential during authorized calls; this is not protection from another process with the same user's privileges.