Do not open a public issue for security vulnerabilities.

Instead, please report vulnerabilities via one of:

1. GitHub Security Advisories: Report a vulnerability
2. Email: Send details to the repository maintainer (see GitHub profile)

• Description of the vulnerability
• Steps to reproduce
• Affected versions
• Potential impact

Draft is a CLI plugin (bash + markdown). Security concerns typically involve:

• Command injection in shell scripts
• Path traversal in file operations
• Sensitive data exposure in generated context files
• Supply chain risks in dependencies

Contributors who report valid security issues will be credited in the release notes (unless they prefer anonymity).