Please report security issues privately through GitHub: open a private vulnerability report. Do not open a public issue, discussion, or pull request for a vulnerability.
Include what you found, how to reproduce it, and the gx version (gx version).
You should get an acknowledgement within a few days. Fixes ship in a new release,
and the advisory is published once users have had a chance to update.
Only the latest release receives security fixes.
In scope:
- The
gxCLI and its git hooks - The
gx-mcpMCP server and the@satoricorp/gxnpm package - Session capture, including the redaction that runs before a transcript is staged
Session capture is the most sensitive surface. Transcripts can contain anything an AI agent saw, so gx redacts known secret shapes from session events before it stages them: AWS access keys, GitHub and Slack tokens, bearer tokens, API-key and password assignments, private keys, and long high-entropy strings. A secret that survives redaction and reaches an upload is a vulnerability. Please report it here.
There is no hosted gx service: gx runs on your machine and talks only to the model, retrieval, and GitHub endpoints you give it credentials for.