Agent Doctor is currently pre-1.0. Security fixes are released on the latest minor version.

Use GitHub private vulnerability reporting for this repository. Do not open a public issue containing credentials, private prompts, tool results, or exploit details.

Include the affected version, reproduction steps, impact, and any suggested mitigation. Never attach unsanitized Agent Doctor evidence bundles from a production environment.