# Security policy

## Supported preview

Only the latest preview on the `main` branch is supported. This project is an experimental local plugin, not a hosted service.

## Reporting a problem

For non-sensitive defects, open a GitHub Issue with the DSH version, plugin version, reproduction steps, expected behavior, and observed behavior.

Do not put secrets or private material in a public Issue: do not include prompts, full Skill text, tokens, cookies, credentials, local paths, or project content. Private vulnerability reporting is not yet configured for this preview; if a report cannot be safely made public, do not open an Issue.