We take the security of this project seriously. If you believe you have found a security vulnerability, please report it to us privately and do not open a public GitHub issue.

• Contact: open a private security advisory via GitHub's Report a vulnerability page, or email the EdgeOne team at EdgeOne@tencent.com.
• Please include a description of the issue, steps to reproduce, impact assessment, and any proof-of-concept code.

We aim to acknowledge reports within 3 business days and will keep you informed of remediation progress. Please avoid public disclosure until a fix has been released.

This repository contains agent skills (SKILL.md, reference docs, hooks, and build scripts) for the EdgeOne Makers platform. Vulnerabilities in these files, the CI workflows, or the published skill artifacts are in scope. Vulnerabilities in the EdgeOne platform itself should be reported through the Tencent Security Response Center.