Use this project for analysis of software, firmware, network recordings and devices you own or are explicitly authorized to examine. Do not use its interfaces to execute untrusted software on production hosts, operate against third-party accounts or bypass software licensing.

Do not upload raw samples or secrets to issues. For a report, include a minimal non-sensitive reproduction, package version, target hash (only if not sensitive), affected command, platform, expected/actual behavior and mitigation.

The repository is an initial security-conscious scaffold, not a certified malware analysis sandbox or chain-of-custody system. Hash-linked evidence is not digitally signed. Reviewed, isolated tool execution is still necessary for hostile files.