Open a private security advisory or contact the maintainer directly if you find a vulnerability.

Context Prism reads local Markdown files through the plugin API. It does not make network requests, collect analytics, or transmit note content.

Repository tests and examples should use synthetic fixtures only.

Security reports are most useful when they include:

• steps to reproduce
• expected behavior
• actual behavior
• affected version