Please do not disclose filesystem-write, Electron IPC, credential, arbitrary-code-execution, or local-runtime boundary issues in public issues.
Use GitHub private vulnerability reporting / Security Advisories if available, or contact Sebastian directly through the project’s private channels.
Include:
- affected version / commit
- reproduction steps
- observed impact
- whether local files, credentials, IPC, or agent permissions are involved