Security is a top priority; we appreciate responsible reporting.

Do not open a public issue. Instead:

1. Go to this repo’s Security tab

2. Click Report a vulnerability

3. Provide:

   • A description of the vulnerability
   • Steps to reproduce the issue
   • Your assessment of the potential impact
   • Any possible mitigations

• Keep the client up to date
• Run with only the necessary permissions
• Be careful about the MCP servers you use

Thank you for helping keep this project secure.