Please do not open a public issue for security reports.

Use GitHub private vulnerability reporting when available:

https://github.com/open-placeholder/open-placeholder/security/advisories/new

If the report concerns the agent skills repository, use:

https://github.com/open-placeholder/skills/security/advisories/new

Include:

• Affected URL, route, or package
• Reproduction steps
• Impact
• Suggested fix, if known