Security contact missing

[232-323]

Hi, SECURITY.md refers to “[security contact]”, but no contact seems to be listed.
Could you provide a private security contact or open a draft GitHub Security Advisory? I would prefer GHSA if possible.

[freema]

Thanks a lot for the heads-up! 🙏

I've enabled GitHub private vulnerability reporting on the repo and updated SECURITY.md to point to GHSA instead of the placeholder:

👉 https://github.com/freema/openclaw-mcp/security/advisories/new

Fixed in 0fe8279. Closing this issue — and thanks again for taking the time to report it responsibly!