Only the current repository contents are supported.

Do not include vulnerability details in a public issue.

If GitHub private vulnerability reporting is enabled for the repository, use that channel. If it is not enabled, open a minimal public issue asking the maintainers for a private reporting path, without disclosing exploit details, secrets, or affected systems.

This repository contains agent instructions and validation/support files. Report issues such as prompt-injection risk, unsafe instructions, malicious or unexpected tool guidance, credential exposure, or behavior that could cause an agent to make misleading README claims.