If you discover a security vulnerability in vettd-skill-scanner, please report it responsibly. Do not open a public GitHub issue.

1. Email: Send a description of the vulnerability to security@agentichighway.ai.
2. GitHub Security Advisories: Use the private vulnerability reporting feature on this repository.

Please include:

• A description of the vulnerability
• Steps to reproduce
• Potential impact
• Suggested fix (if any)

We aim to acknowledge reports within 48 hours and provide a fix or mitigation within 7 days for critical issues.

This policy covers the vettd-skill-scanner Rust crate and its HTTP shim. For vulnerabilities in other AgenticHighway projects, please report to the same email address.