Do not open a public issue for a vulnerability or exposed credential. Email support@lnkflow.io with a description, affected version, reproduction steps, and impact. Do not include live customer data or working secrets.

The bundled repository scanner is read-only, uses the Python standard library, does not make network requests, and does not print matched secret values. Review all scripts before installing any agent plugin. The skill never requires a LnkFlow token, Stripe secret, or webhook signing secret to be pasted into an LLM conversation.

This package provides implementation and audit guidance. It does not replace a security review, privacy impact assessment, or legal advice.