Security policy & acknowledgments

Reporting a vulnerability

• See /.well-known/security.txt or open a private security advisory on GitHub (github.com/mds-main/Agenticmakers/security/advisories).
• Please do not post exploit details publicly until we have shipped a fix.
• Never include real user secrets or third-party API keys in a report.

What the guide enforces

The Agentic Makers Guide never makes network calls, never asks for keys in chat, denies reading .env files in .claude/settings.json, and requires server-only AI calls, parameterized database queries and session checks on every endpoint.

Acknowledgments

No security advisories have been reported yet. Researchers who responsibly report valid issues will be credited here with their permission.