Cal CLI interacts with calendar data and can perform user-requested calendar changes, so security and privacy issues should not be disclosed through a public GitHub issue.

Please use GitHub's private vulnerability reporting for this repository.

Include:

• a clear description of the issue
• steps needed to reproduce it
• the affected Cal CLI version
• the potential impact
• any relevant logs or output with personal calendar data removed

Do not include real calendar contents, credentials, tokens, account information, or other private data.

Security-relevant issues may include unintended calendar access, unintended writes, permission handling, local configuration exposure, or behavior that bypasses Cal CLI's documented confirmation or revision checks.

General bugs, documentation problems, and feature requests can use normal GitHub Issues.