This project should never require access to the plaintext value of a Claude OAuth token, API key, or password.

If a vulnerability could expose credentials or another profile's private data, please avoid posting secrets in an issue. Open a minimal report describing the impact and reproduction steps with all credentials removed.