Do not post secrets, GitHub personal access tokens, session cookies, or private account data in a public issue.

For bug reports, include only the minimum console output needed to reproduce the problem and redact credentials before sharing it.

GitHub Plus supports an optional GitHub personal access token for API rate limits. The token is stored through the userscript manager's value storage. Users should use the minimum permissions necessary and revoke any token they believe has been exposed.