Please do not open a public issue for a security problem. Open a private security advisory on GitHub instead: go to https://github.com/vadimchernets/roundcall/security/advisories/new, describe what you found, how to reproduce it, and what it lets someone do. You will get an answer as soon as possible.

Useful things to include: your operating system, your Claude Code version, the Claude in Chrome extension version, and, if the browser guard is involved, the tool call it allowed or blocked (remove any personal data first).

Roundcall's own code: the scripts in scripts/, the browser guard hook in hooks/, and the skills in skills/. Problems in Claude Code, in the Claude in Chrome extension, or in the chat sites themselves should go to their makers.