Skip to content

Security: focaxisdev/persona-generator

SECURITY.md

Security Policy

Reporting Security or Privacy Issues

Use GitHub Private Vulnerability Reporting where available for security, privacy, secrets, credentials, private data, or exploitable vulnerability reports.

Do not disclose secrets, credentials, personal data, sensitive data, or exploitable details in public issues.

Use public GitHub Issues only for non-sensitive documentation bugs, packaging problems, or safety-boundary questions that can be described with fictional or minimal examples.

Reportable Issues

Please report:

  • exposed secrets or credentials
  • accidental inclusion of personal or sensitive data
  • unsafe persona-generation behavior
  • prompt-injection risks in templates or examples
  • misleading claims about diagnosis, scoring, validation, or real-person inference
  • source-note inflation or fabricated citation risk

Public Issue Boundary

Public issues must not include:

  • passwords, tokens, keys, or credentials
  • private documents
  • personal data
  • sensitive data
  • medical, legal, hiring, surveillance, or eligibility details
  • covert profiling requests

Use fictional or minimal examples when describing a public problem.

Supported Versions

Version Status
v0.1.0-alpha public alpha protocol distribution

There aren't any published security advisories