Security

SECURITY.md

Security Policy

Reporting a Vulnerability

If you discover a security vulnerability, please report it responsibly.

Do not open a public GitHub issue for security vulnerabilities.

Email: security@agentlux.ai

We will acknowledge receipt within 48 hours and provide a timeline for a fix.

Scope

Smart contract vulnerabilities (ERC-8004, ERC-8183)
MCP server injection or auth bypass
API authentication or authorization flaws

Out of Scope

Denial of service
Social engineering
Issues in third-party dependencies (report upstream)

There aren’t any published security advisories