Security fixes apply to the current main branch and repository-owned examples. Third-party projects listed in the directory keep their own security and support policies.

Do not open a public issue for an unpatched vulnerability in this repository.

Use GitHub private vulnerability reporting.

If GitHub is unavailable, email nyk@builderz.dev. Use the subject Awesome Agent Cortex security report.

Name the affected file or workflow. Provide the conditions required to reproduce the problem, its likely impact, and any mitigation you tested.

Remove credentials, personal data, private hostnames, and unrelated local paths from evidence.

Reports concerning a listed third-party project should normally go to that project's maintainers. Contact this repository when the listing, example configuration, automation, or contribution workflow creates the risk.

The maintainer will validate the report privately. When the repository is affected, remediation will be coordinated before disclosure. Reporter credit is agreed with the reporter.

No response-time guarantee is offered.