Please do not open a public GitHub Issue for security vulnerabilities.

Instead, report privately via one of:

1. GitHub Security Advisories (preferred): → https://github.com/fockus/skill-memory-bank/security/advisories/new

2. Email: open a draft Security Advisory on GitHub — this is the canonical channel.

Include:

• A clear description of the vulnerability.
• Minimal reproduction steps or a PoC.
• Affected versions (e.g. 3.0.0, 3.0.0-rc1).
• Your assessment of impact (arbitrary file write, code execution, secret exposure, etc.).

• Acknowledgment: within 72 hours of receipt.
• Triage & severity classification: within 5 business days.
• Fix timeline (from confirmed severity):
  • Critical / High: patch release within 7 days.
  • Medium: patch release within 30 days.
  • Low: addressed in the next minor release.

In scope:

• install.sh / uninstall.sh — anything that writes to $HOME or user projects.
• memory_bank_skill/ Python package.
• All adapters/*.sh cross-agent installers.
• All hooks/*.sh and scripts/*.sh.
• GitHub Actions workflows (.github/workflows/*.yml).

Out of scope (but still welcome as GitHub Issues):

• Vulnerabilities in upstream dependencies (report to the dependency itself).
• Vulnerabilities in user projects that install this skill — we can't audit arbitrary codebases.
• Attacks that require a pre-existing foothold on the user's machine.

We follow coordinated disclosure:

1. Reporter and maintainer agree on a patch and disclosure timeline.
2. Maintainer releases a patched version on PyPI + Homebrew.
3. Public advisory is published with CVE if applicable.
4. Credit is given to the reporter unless anonymity is requested.

• install.sh uses a marker pattern (<!-- memory-bank:start/end -->) to merge into user files idempotently; it never silently overwrites existing content.
• Backups (.pre-mb-backup.<timestamp>) are created only when content differs — see FAQ in README.
• Uninstall removes only manifested files after canonical path validation; user content between markers is preserved.
• Project-local .memory-bank/metrics.sh overrides are blocked by default and run only with explicit MB_ALLOW_METRICS_OVERRIDE=1 opt-in.
• Pi global install is first-class: install.sh registers only managed files under ~/.pi/agent/ (AGENTS.md, skills/memory-bank, and prompts/*.md); old Pi skill backups are stored outside the scanned skills/ directory, and project MB_PI_MODE=skill leaves an existing global symlink unchanged before cleanup validates paths under ~/.pi/agent/skills.
• The skill does not make network calls at runtime (neither install.sh nor the Python CLI).
• No telemetry. No analytics. No opt-in / opt-out to discuss.