Please do not post credentials, private study content, or an exploitable vulnerability in a public issue. Use a private GitHub security advisory for sensitive reports when available; otherwise open an issue with the minimum reproducible detail and no private data.

Security-sensitive changes must preserve the MV3 restrictions: no eval, new Function, remotely hosted executable code, unsafe SVG, or telemetry containing question/answer content. Run pnpm compile, pnpm test, and pnpm build when practical. See PRIVACY.md for data handling.