Please report security issues privately instead of opening a public issue.

Send a short report with the affected helper, a minimal reproduction, and expected impact. Do not include live Discord tokens, webhook URLs, private guild IDs, cookies, or dashboard credentials.

This package should only contain reusable policy logic and static metadata. Product-specific runtime secrets do not belong in this repository.