Security problems go to a private security advisory on this repository rather than into a public issue. A report that names the affected version, the platform, and the steps that reproduce the problem can be acted on directly.

In scope: the CLAgent desktop application as published on cl-agent.com/download.html, the site at cl-agent.com, and the app market it serves.

Out of scope: apps published to the market by third parties, which carry their own publisher, and any deployment of a model endpoint operated by a user.

The source code of CLAgent is not hosted in this repository.

安全问题走本仓库的私密安全通告，公开 Issue 不收安全问题。可直接处理的报告写清受影响的版本、平台与复现步骤。

在范围内：cl-agent.com/download.html 发布的 CLAgent 桌面应用、cl-agent.com 站点，以及它提供的应用市场。

不在范围内：第三方发布到市场的应用（由各自的发布者维护），以及用户自己运行的模型端点。

CLAgent 的源代码不在本仓库。