Security fixes target the latest version on main.

Report vulnerabilities privately through GitHub Security Advisories. Include the affected commit, impact and a minimal synthetic reproduction. Do not put credentials or private conversations in public issues.

The tool parses local logs without executing their content. Reports omit conversation text and raw response IDs, but timestamps, model names and settings remain. Review generated reports before sharing them. Git ignore patterns are not a substitute for checking staged files.