This repository contains TOML content definitions (agents, hands, integrations, skills, plugins, providers). Security concerns include:

• Malicious content in system prompts or descriptions
• Command injection in integration transport commands
• Integration URLs pointing to phishing or malicious sites
• Credential exposure in TOML files

Do NOT open a public issue for security vulnerabilities.

Email security@librefang.dev with:

1. Description of the vulnerability
2. Affected file(s) and content type
3. Steps to reproduce or exploit
4. Suggested fix (if any)

• Acknowledgment: within 48 hours
• Assessment: within 5 business days
• Fix: dependent on severity, typically within 2 weeks