Security

SECURITY.md

Security Policy

ScriptCut is a local-first desktop app. Please report security issues privately instead of opening a public issue.

Reporting

Email or privately contact the maintainer with:

affected version or commit
reproduction steps
expected impact
any relevant logs or proof of concept

Do not include API keys, raw private media, or other sensitive files in reports.

Scope

Relevant issues include:

accidental upload or exposure of local media
credential leakage
unsafe handling of project files
command execution vulnerabilities
dependency or packaging issues that affect users

There aren't any published security advisories