Rivulet agent lab intentionally has no live integrations. It must never contain credentials, private URLs or IDs, session files, personal data, or remote account configuration.
Do not put a suspected secret or exploit detail in a public issue. Once this repository is public, use GitHub's Report a vulnerability control when it is available. If it is not available, open a minimal issue requesting a private coordination path and include no sensitive detail.
For ordinary package defects, use the public issue template.