Do not open a public issue for a security vulnerability. Email security@fedpromptly.com with a concise description and safe reproduction details.

Do not commit or paste passwords, GitHub tokens, PayPal secret credentials, Stripe secret keys beginning with sk_, private invitation links, or personal identification numbers. Publishable browser-side identifiers must still be reviewed before release.

If a secret was exposed, revoke or rotate it immediately in the provider dashboard and then remove it from the repository history.