SECURITY.md

# Security

Do not commit API keys, passwords, personal media, private voice recordings, or local voice models. AgentBroko's current skills do not require secrets and do not send project files over the network.

Report security concerns privately to brokeinnovation@gmail.com. Do not open a public issue containing sensitive data.

Include the affected version, platform, reproduction steps, and expected impact. Allow maintainers reasonable time to investigate before public disclosure. Supported security updates currently target the latest released version.