agentroot edits the local files of other apps, so a bug can damage your agent history. It never sends anything over the network and never opens credential files.

To report a vulnerability, or a case where agentroot read a credential, leaked a token in its output or corrupted an agent's data, use GitHub's private reporting: Security → Report a vulnerability on this repository. Please do not open a public issue for it. Reports are answered on a best-effort basis; this is a free, volunteer project.

Do not attach scan reports, journals or agent files to a report without reading them first: they contain your folder names and may contain more.