This skill only reads public Splunkbase metadata and never handles credentials.
Report suspected vulnerabilities privately through GitHub private vulnerability reporting rather than public issues.
Vulnerabilities in Splunk products go to Splunk Product Security.