Please report security issues privately to the repository owner through GitHub security advisories. Do not post exploit details in a public issue.

ModelStackCheck makes provider requests only when a user runs a diagnostic. It does not upload reports or run shell commands. Reports can still contain provider supplied error text, so review them before sharing.

We welcome reports about secret redaction, unsafe network behavior, local data exposure, and report parsing.