If you discover a security vulnerability, please report it responsibly.

Do not open a public GitHub issue. Instead, please email the maintainer directly or use GitHub's private vulnerability reporting.

We will acknowledge your report within 72 hours and work with you to understand and address the issue.

spec-manager is a local-only CLI tool that operates on markdown files. It does not handle network requests, authentication, or sensitive data storage. However, we take all reports seriously.