Do not upload raw audit matches, credentials or private reports to an issue. For sensitive findings, contact the repository owner privately using the hosting platform's private security reporting feature when enabled. Otherwise request a private contact channel without disclosing the finding. No disclosure deadline or supported-version promise is made for this pre-release tool.

The verifier runs repository code with local user permissions. Use only reviewed, trusted commands. Reports and exports stay private until independently reviewed.