ghafk runs coding agents with your credentials, and issue text is their prompt. The security model tells you what ghafk prevents and what it leaves to you.

Report it privately through this repository's Security tab, using Report a vulnerability. Please do not open a public issue.

Useful reports show how text or state from someone without write access can reach an agent, a shell, a merge or your credentials, or how ghafk can be made to spend tokens without limit.