PictoPlus processes local book, model and setup files. Report a suspected vulnerability privately to the maintainer using GitHub's private vulnerability reporting if enabled. If it isn't available, open an issue asking for a private contact without posting exploit details or private data.

See the release security review. Don't disable antivirus protection to run the app. Never upload a setup file, save or extracted game data to a malware-scanning service.