Report vulnerabilities privately to the AVI-SPL repository maintainers. Do not open a public work item containing credentials, tokens, tenant IDs, environment URLs, flow names, connector configuration, workflow definitions, or customer data.

Flow Inventory reads metadata through Power Platform ToolBox host bridges. It does not handle access tokens directly and does not intentionally persist inventory data. Screenshots, logs, and exported diagnostics should be sanitized before sharing.