To report a potential security vulnerability (such as an AST sandbox bypass, prompt injection vector in templates, or unexpected script execution), please open a private GitHub Security Advisory or contact security@codeenk.dev. All reports are acknowledged within 48 hours.