If you discover a security issue in any plugin or in the marketplace tooling, please email john@weblifter.com.au rather than opening a public issue. We will acknowledge receipt within 72 hours.

Confirmed vulnerabilities are treated as P0: the affected plugin is delisted from .claude-plugin/marketplace.json pending remediation.

This repository is fully public on GitHub. Do not add anything private, secret, or customer-identifying to any plugin, skill, template, or example — treat everything committed here as world-readable and permanent.