Report vulnerabilities in the OpenShell Python SDK privately through NVIDIA/OpenShell's private reporting form and name ai-openshell/sdk-python as the affected component. Do not disclose vulnerabilities in public issues, discussions, or pull requests.

The OpenShell security policy applies to this repository: the report template, review process, and coordinated disclosure are the same. Private reporting directly on this repository will be enabled once its process is set up; until then, use the form above.