If you discover a security vulnerability in the CapSkip Python SDK, please report it responsibly.

Do not open a public GitHub issue for security vulnerabilities.

Instead, email support@capskip.com with:

• Description of the vulnerability
• Steps to reproduce
• Potential impact
• Suggested fix (if any)

We aim to acknowledge reports within 48 hours and provide a status update within 7 days.

This policy covers the capskip Python package in this repository.

The CapSkip desktop application itself is maintained separately — report app-level issues to CapSkip support.

• Do not commit API keys or captcha tokens to version control
• Use environment variables for CAPSKIP_API_KEY
• CapSkip runs locally — ensure your firewall rules match your security requirements
• When using proxies, avoid logging credentials in application logs