Please do not report security vulnerabilities in a public issue. Use GitHub's private vulnerability reporting for this repository and include reproduction steps, affected versions, and impact.

Security fixes target the latest published Agent version. Older versions may need to upgrade before receiving a fix.

CCLink Agent runs local coding tools with the permissions of the operating system user that started it. Pair only clients you trust, and review permission settings before enabling automatic tool execution.