Please do not report security problems in public issues. Use GitHub's private vulnerability reporting (Security tab > "Report a vulnerability") with steps to reproduce and the affected version.

In scope: anything that lets the agent change rules without a person's approval, write main, release something other than the tested change, leak credentials or rule data to a party not configured by the user, or bypass the spending limits. We aim to answer within 7 days.