Do not open a public issue for a security problem. Use GitHub's private report form: https://github.com/nirholas/agents-sdk/security/advisories/new
Include the affected version, a minimal reproduction and the impact you expect. You will get an acknowledgement within three business days and a fix or mitigation plan within fourteen.
The latest published minor version of @three-ws/agents receives fixes.