Report vulnerabilities privately to hello@synthcity.org. Include the affected revision and a minimal reproduction; do not post credentials or sensitive product data in public issues.

These examples process untrusted plugin state and demonstrate host integration. They are early developer tooling, not a security sandbox or a certification system. Keep toolchains and dependencies current and review plugins before running them.