ClipSift is designed for localhost or a trusted private network. It does not currently include end-user authentication, so do not expose a working instance to the public internet without adding appropriate access control.
Please contact ArtMoreno on GitHub before sharing vulnerability details. Do not include secrets, personal production data, or exploit details in a public issue.