Email security@rodgersintelligence.com with:

• affected path or command
• impact
• proof of concept (non-destructive)

Do not open a public issue for secrets or exploitable bugs.

• Never commit .env, cookies, tokens, private keys, or customer data.
• Rotate any credential that may have been exposed.
• This package sends nothing anywhere: scoring is local regex and string work.