mirror of
https://github.com/magnus919/agent-skills.git
synced 2026-09-21 00:26:23 +03:00
21 lines
1003 B
Markdown
21 lines
1003 B
Markdown
# Security policy
|
|
|
|
## Reporting a vulnerability
|
|
|
|
Please do not open a public issue for a security vulnerability. Use GitHub's private vulnerability reporting for this repository if it is enabled. If it is unavailable, contact the repository owner through the public contact method on the GitHub profile and include `agent-skills security` in the subject.
|
|
|
|
Include:
|
|
|
|
- The affected skill, file, or release
|
|
- A clear description of the impact
|
|
- Reproduction steps or a minimal proof of concept
|
|
- Any suggested mitigation
|
|
|
|
Do not include credentials, private URLs, or personal data in the report unless they are necessary to reproduce the issue.
|
|
|
|
## Response
|
|
|
|
You should receive an acknowledgement within seven days. We will investigate, keep the reporter informed when practical, and coordinate disclosure after a fix or mitigation is available.
|
|
|
|
Supported versions are the latest commit on `main` and the most recent tagged release. Older releases may receive security fixes when the impact warrants it.
|