Skip to content

Repository navigation

Security: osaxyz/sepiace

Security

Report a vulnerability

SECURITY.md

sepiace

Security policy

sepiace keeps people's long-term memories, so we take reports seriously.

Caution

Please do not open a public issue for a vulnerability.

Reporting a vulnerability

Report it privately through GitHub's private vulnerability reporting for this repository. Include what you found, how to reproduce it, and what an attacker could do with it. We will reply as soon as we can.

Scope

  • The plugin in this repository: its MCP server settings, skills, and hooks.
  • The create-sepiace CLI in cli/.
  • The sepiace server, console, and sign-in at hi.sepiace.io, which run outside this repository. Report issues with them the same way.

There aren't any published security advisories