Please do not open a public issue. Use GitHub's private reporting instead: Report a vulnerability.

Relevant reports include the audit script running unintended commands, or skill instructions that could lead an agent to leak secrets or publish private data.

This project contains documentation and one read-only Python script that calls the GitHub CLI. It has no runtime service and stores no data.