Skip to content

Security: Marrowleaf/agentlink

Security

SECURITY.md

Security Policy

Reporting a Vulnerability

Please do not report security vulnerabilities through public GitHub issues.

Instead, please email security concerns to the maintainer privately.

Supported Versions

Version Supported
0.1.x ✅ Active development

Security Architecture

AgentLink uses:

  • Ed25519 for agent identity and message signing
  • X25519 for Diffie-Hellman key exchange
  • XSalsa20-Poly1305 for authenticated encryption of memory payloads
  • SHA-256 for integrity verification

If you discover a weakness in any of these cryptographic implementations, please report it immediately.

There aren't any published security advisories