Please report security issues privately via GitHub Security Advisories or email the maintainers. Do not open public issues for undisclosed vulnerabilities.

Loading pickled models can execute arbitrary code. Use --trust-pickle only for models from trusted sources.

everyharness plugin install runs pip install and loads entry-point code at startup. Treat plugin installs like installing arbitrary Python packages.

Computer-control features must stay opt-in (--allow-control). Never enable real OS control in CI or shared environments.

everyharness ui writes prompt packs locally. Review generated code before running agents against production systems.

Core dependencies are scanned in CI. Report supply-chain concerns with reproduction steps.