Do not report vulnerabilities through a public issue.

Use the current contact and disclosure policy at https://liberated.site/.well-known/security.txt. Include the affected skill or endpoint, a minimal reproduction, expected impact, and whether the report contains sensitive material.

Never submit credentials, wallet private keys, customer data, personal data, or production payloads as a reproduction. Use synthetic values and redact tokens, capability URLs, retrieval tokens, and request identifiers.