Report a vulnerability through GitHub's private vulnerability reporting form: this fork's for the Herdr dispatcher, the Agent gate, and routing, or pstack-claude's for the shared skills and port. Do not open a public issue for a vulnerability, because the issue tracker is public from the moment you press submit.

The skill tree, the hooks, the vendored bun scripts under plugins/pstack/skills/poteto-mode/scripts, and the CI workflows are all in scope. Anything that makes an agent run a command the user did not intend, exfiltrate a secret, or reach outside the repository it was pointed at counts, as does a supply-chain weakness in how this repository pins and installs its own dependencies. Findings in Claude Code belong to Anthropic, in Codex to OpenAI, in Herdr to herdrdev, and in the upstream project this repository syncs from belong upstream.

Only the latest release on main receives fixes. Plugin auto-update installs by version number, so a fix ships as a new release rather than as a patch to an older one, and there are no maintained release branches to back-port to.