Use GitHub private vulnerability reporting on this repository. Do not open a public issue or Discussion with exploit details.

Include the package version, a minimal reproduction, and impact. We will acknowledge the report and say whether a fix or advisory will ship.

PrismThinker is a decision gate. Hosts remain responsible for authentication, argument validation, execution binding, and replay protection. Reports that only apply to a host that ignores REFUSE / ESCALATE / GATHER are out of scope for this package.