NoKey modules run locally / self-hosted; they don't phone home. If you find a vulnerability, do not open a public issue — email kleistfilho@gmail.com with details and steps to reproduce. We'll respond within a few days.
Note: the edge modules (web-markdown, browser-agent, etc.) run code you host.
You are responsible for respecting target sites' robots.txt / terms and applicable law.