Please do not disclose vulnerabilities in a public issue.

Report suspected security problems privately to security@openinterpreter.com. Include the affected extension version, impact, reproduction steps, and any suggested mitigation. Do not include real user data, browser profiles, session cookies, or active credentials.

Only the latest released extension and the current main branch are expected to receive security fixes.