This toolkit runs AI coding agents with a Claude token inside Docker containers, so isolation and token handling matter.

Please report privately via GitHub: Security → Report a vulnerability on this repository. Do not open a public issue for security problems.

Include what you found, how to reproduce it, and the impact (for example: token exposure, writing outside the item's output folder, touching a protected path, or a builder reaching the host).

• Builder containers need network access to reach the Claude API, and the token is readable inside them. Only run builders on repositories you trust.
• Compressed files cannot be scanned for tokens.

Revoke it from your Claude account settings, create a new one with claude setup-token, and replace ~/.claude/builders/oauth_token.