prodex automates a logged-in ChatGPT Pro browser session and brokers tasks between coding agents, so security reports are taken seriously.

Please do not open a public issue for security vulnerabilities.

Report privately instead:

• Preferred: GitHub private vulnerability reporting
• Include: affected version/commit, reproduction steps, and impact.

We aim to acknowledge within 5 business days and to coordinate a fix and disclosure timeline with you.

prodex is local-first and is designed never to expose your ChatGPT account, browser session, or bridge endpoints to other users. Findings of particular interest:

• Credential, cookie, or session-token leakage from the visible-browser adapter
• Token-bearing MCP URLs being logged, printed, or otherwise exposed
• Bypass of the receipt-gated repo-write/apply/stage tools
• Any default that would let a third party reach your logged-in session or .bridge ledger
• Path traversal or arbitrary file access through the repo/file tools

Explicitly out of scope (these are intentional non-features, see the README): hidden ChatGPT endpoints, cookie/token extraction, stealth automation, and public tunnel auto-setup.

prodex is pre-release (0.x). Security fixes target the latest main.