Only the latest released version receives security fixes before TaskGrade 1.0.

Please report vulnerabilities privately through GitHub Security Advisories for eddyvlad/taskgrade. Do not open a public issue containing exploit details or credentials.

TaskGrade sends task content only to the configured Ollama endpoint. It does not collect telemetry or contact GitHub. Users are responsible for securing remote Ollama endpoints and reviewing task content before sending it outside their machine.