Patchsmith operates on local files. It makes no network requests and does not collect telemetry.

Use it only with resources you are authorized to inspect or modify. The repository intentionally excludes commercial assets, title-specific keys, executable patches, DRM bypasses, and full repacked game files.

When reporting a security issue, do not attach proprietary game data. Provide a minimal synthetic reproduction instead.