Report vulnerabilities privately through GitHub Security Advisories for this repository. Do not open a public issue for a suspected vulnerability.

Tempo plugins never require users to paste wallet private keys, seed phrases, provider credentials, or payment material into prompts.