Security
Please report vulnerabilities privately through GitHub Security Advisories for the repository.
Report a Vulnerability
Include affected version, operating system, Node.js version, reproduction steps, expected behavior, actual behavior, and logs with secrets removed.
Security Boundaries
- OpenMind blocks protected file paths and dangerous system commands.
- Approved commands still run with your local shell permissions.
- Do not paste secrets into prompts or public issue reports.