Please report security issues through a private GitHub Security Advisory for this repository. Do not open a public issue for vulnerabilities, private file exposure, path traversal, or unsafe generated-asset handling.

Include reproduction steps, affected versions, expected impact, and any suggested mitigation. Reports will be reviewed before public disclosure.