SECURITY.md

# Security Policy

## Reporting a vulnerability

If you have discovered a security vulnerability in amd/skills, please do NOT report it publicly using a GitHub issue. Instead, you should report the issue via the AMD Product Security website:

[https://www.amd.com/en/resources/product-security.html](https://www.amd.com/en/resources/product-security.html)

In your report, please include the skill used alongside transcripts, agent / model used, and a minimal reproduction, if possible.