Report suspected vulnerabilities privately rather than opening a public issue. Use GitHub's private vulnerability reporting on this repository (Security → Report a vulnerability), or contact the maintainer directly.

Please include the affected version or commit, reproduction steps, and the impact you observed. We aim to acknowledge reports and will coordinate a fix and disclosure timeline with you.

The bot handles two sensitive credentials. None are ever logged.

.env is gitignored.