Security fixes are applied to the latest commit and the newest published release only.

Do not open a public issue for a vulnerability that could expose local files, credentials, repository access, or destructive filesystem behavior.

Use GitHub Private Vulnerability Reporting for this repository. Include:

• affected version or commit;
• operating system and architecture;
• reproduction steps using an isolated home when possible;
• expected and observed filesystem effects;
• whether credentials or private repository data may have been exposed.

Maintainers will acknowledge a report as soon as practical, coordinate a fix, and publish an advisory when users need to take action.

AgentEnv Manager reads and may modify local Agent instructions, Skills, and supported MCP enablement fields only after a Preview and confirmation. Profile Apply uses backups and recovery journals. Reports should treat bypasses of Preview, ownership checks, backup, atomic replacement, or rollback as security issues.

GitHub OAuth tokens are encrypted with Electron safeStorage. System Git credentials and SSH keys remain owned by the operating system and Git tooling.

Profile Compare invokes the selected Agent CLI and therefore needs that Agent's existing authentication context. It copies only the minimum supported credential material into a temporary owner-only home, or passes already-set credential environment variables to the child process. Temporary credentials must never be written to comparison reports, diagnostics, Workspace Sync, or the source repository. Failures to isolate or remove them are security issues.

Compare may send the entered task and included Workspace/Profile context to the model provider configured by the selected Agent. It must not Apply a Profile, write to the real Agent home, or modify the selected source folder.