Please do not publish vulnerabilities involving the installer, unsafe path handling, or repository automation in a public issue before a maintainer has reviewed them.
Report a security issue privately through GitHub's Security → Report a vulnerability flow. Include the affected file, reproduction steps, impact, and a minimal safe fix when possible. Never include API keys, account tokens, private repository contents, or personal data.
Artwork defects, animation problems, and ordinary installation questions belong in public issues and are not security vulnerabilities.