Security fixes are provided for the latest released version of pi-skillful.
Please do not open a public issue for suspected security vulnerabilities.
Report privately by contacting the repository maintainer through GitHub. Include:
- a description of the issue;
- steps to reproduce;
- affected versions or commits, if known;
- any suggested mitigation.
The maintainer will acknowledge reports as soon as practical and coordinate disclosure once a fix or mitigation is available.
pi-skillful is a Pi package. Pi extensions execute with the same permissions as the local user running Pi. Users should review installed Pi packages and only install packages from sources they trust.