Security fixes are applied to the latest revision of the main branch.

Please use GitHub's private vulnerability reporting feature under the repository's Security tab. Do not include API keys, access tokens, private endpoint addresses, or other secrets in a public Issue.

When reporting, include the affected revision, reproduction steps, expected behavior, and impact. Use dummy credentials whenever possible.

API Probe is designed to run locally on 127.0.0.1. Do not expose its local HTTP port through public port forwarding or a reverse proxy. Model probes are real upstream requests and can consume paid quota.