Please report vulnerabilities privately through GitHub's security advisory feature for this repository. Do not open a public issue containing credentials, tokens, local Kanna transcripts, or other sensitive data.

Use KANNA_PASSWORD and KANNA_LLM_API_KEY instead of passing secrets as command-line arguments. JSON responses are printed as returned by Kanna and may contain credentials, so inspect sensitive settings only in a controlled local terminal.