Use GitHub's private vulnerability reporting feature for this repository when it is enabled. Otherwise, open an issue containing only non-sensitive reproduction information. Never include private messages, participant details, workbook data, internal paths, tokens, credentials, screenshots, or production equipment data.

• Run the bot only on a trusted Windows account and device.
• Keep the WebView2 DevTools endpoint bound to localhost; never expose port 9333 to another machine or an untrusted network.
• Use a dedicated WhatsApp debugging port and do not set a permanent global WEBVIEW2_ADDITIONAL_BROWSER_ARGUMENTS value.
• Limit access to the workbook, backup directory, and downloaded images because they can contain private operational data.
• Review all changes before committing, especially configuration paths, group names, equipment mappings, logs, workbooks, and media.
• Do not put secrets in the source code or .env files committed to Git.
• Keep Python, Selenium, Edge WebView2, WhatsApp Desktop, and dependencies current.

The public example contains no bundled credentials, private workbook, chat data, or production mappings. Generic example values must be replaced locally and must not be committed if they are confidential.