# Security

Omarchy shell plugins execute as unsandboxed code with the current user's
permissions. Review this repository before installing it.

Singlenote does not use the network, `sudo`, external services, or third-party
runtime dependencies. It stores the current task under
`$XDG_STATE_HOME/singlenote/`, installs the managed `one-thing` command under
`~/.local/bin/`, and can add one clearly marked Hyprland keybinding after
backing up the bindings file. The uninstaller removes only resources it owns.

Please report vulnerabilities privately through
[GitHub Security Advisories](https://github.com/sahzudin/omarchy-singlenote/security/advisories/new).
Do not include sensitive information in a public issue.