Report Security Issues

We take security seriously. Please report vulnerabilities privately.

How to report

Use GitHub private vulnerability reporting on agents-sdk-space/devstack.bid (Security → Report a vulnerability). Do not open a public issue.

What to include

Steps to reproduce, affected URL, and impact. Never include real user data or secrets.

Safe harbor

Good-faith research that avoids harm to users and data will not be pursued.

Last updated: October 2026. This page is a draft and may change.