This repository contains an audit playbook and documentation rather than a runtime application. Security reports should concern the repository itself, including:

• Unsafe or contradictory audit instructions.
• A rule that creates a significant security risk for users.
• Malicious or unintended repository content.
• Sensitive information accidentally included in the repository or its examples.

Vulnerabilities discovered in another project by using this skill should be reported to that project's maintainers through its own security process, not to this repository.

Use GitHub's private vulnerability reporting feature for this repository when it is available. If it is not available, open a public issue without sensitive details and request a private reporting channel.

Do not include credentials, private source code, personal information, or an unredacted real-world exploit report in a public issue.

This is a community project and does not promise a fixed response time or a bug bounty. Clearly documented reports with minimal synthetic reproductions are easier to assess.