SECURITY.md

# Security Policy

## Supported Versions

The latest released version of this plugin is supported. Older versions are not
maintained; please update before reporting.

## Reporting a Vulnerability

Please report security issues privately through GitHub — do **not** open a public
issue.

Use **Report a vulnerability** under the repository's **Security** tab (GitHub
private vulnerability reporting). The form is available directly at
https://github.com/senderkit/senderkit-skills/security/advisories/new — it opens a
private advisory visible only to the maintainers.

We aim to acknowledge reports within 3 business days and to provide a remediation
timeline after triage. Please include reproduction steps and affected versions.