Report vulnerabilities privately through GitHub Security Advisories for this repository.

Do not include API keys, provider tokens, proprietary EDA data, unpublished IP, or sensitive logs in issues or evidence fixtures. Flow files reference credential environment-variable names only. Online execution should deny network access unless an assignment explicitly authorizes a destination.