Please report security vulnerabilities privately by emailing security@skyboy.in. Do not open a public issue for vulnerabilities, leaked secrets, dependency compromise, or unsafe code execution paths.

Include:

• Affected file, route, dependency, or pattern
• Steps to reproduce
• Impact and likely severity
• Suggested mitigation if you have one

• Initial acknowledgement: within 3 business days
• Triage and severity assessment: within 7 business days
• Fix or mitigation plan: within 14 business days for confirmed issues
• Public disclosure: after a fix is available or a reasonable mitigation is documented