Skip to content

Security: Jamkris/everything-gemini-code

Security

SECURITY.md

Security Policy

Supported Versions

Version Supported
1.2.x ✅
1.1.x ✅
< 1.1 ❌

Reporting a Vulnerability

If you discover a security vulnerability in Everything Gemini Code, please report it responsibly.

Do not open a public GitHub issue for security vulnerabilities.

Instead, email security@egc.tools with:

  • A description of the vulnerability
  • Steps to reproduce
  • The affected version(s)
  • Any potential impact assessment

You can expect:

  • Acknowledgment within 48 hours
  • Status update within 7 days
  • Fix or mitigation within 30 days for critical issues

If the vulnerability is accepted, we will:

  • Credit you in the release notes (unless you prefer anonymity)
  • Fix the issue in a timely manner
  • Coordinate disclosure timing with you

If the vulnerability is declined, we will explain why and provide guidance on whether it should be reported elsewhere.

Scope

This policy covers:

  • The EGC extension and all scripts in this repository
  • Hook scripts that execute on your machine
  • Install/uninstall lifecycle scripts
  • MCP configurations shipped with EGC
  • Command, skill, and agent definitions

Security Resources

There aren’t any published security advisories