Report vulnerabilities in coding_tools's code, scripts, configuration, dependency handling, or documented deployment workflow. Do not report ordinary model-quality disagreements or unsupported feature requests as security issues.

Use a private GitHub Security Advisory for this repository when the option is available. If private reporting is unavailable, open a minimal public issue containing no exploit details, credentials, personal data, or usable proof of concept, and request a private channel.

Include the affected path or component, reproducible environment, impact, and a proposed mitigation when known. Do not paste API keys, tokens, model files, private prompts, logs, or generated user data.

The maintainer will acknowledge actionable reports, investigate the affected revision, and coordinate disclosure after a fix or mitigation is available. Please keep the report confidential until then.