agent-card-test-vectors ships static JSON conformance fixtures and a thin Node loader. No network listener, no remote fetch, no execution of user-supplied code, no secrets.

All vector content is synthetic. No real agent identifiers, customer identifiers, or production deployment metadata are included.

Only the latest tagged release is supported.

Please use GitHub Security Advisories for private disclosure:

• Open a security advisory

Do not file public issues for security reports.