Security

SECURITY.md

Security Policy

Reporting a Vulnerability

If you discover a security vulnerability in upstack, please report it responsibly:

Do NOT open a public issue.
Use GitHub Security Advisories to report privately.

We will acknowledge your report within 48 hours and work with you on a fix.

Scope

Skills (skills/*/SKILL.md)
Install script (install.sh)
Bin utilities (bin/)
Update check and config mechanisms

There aren’t any published security advisories