Please report vulnerabilities privately to the repository maintainer before public disclosure. Do not include credentials, private dataset URLs, personal data, or exploit payloads in a public issue.

This research code executes third-party model repositories and shell setup scripts. Review pinned revisions and patches before running them, use isolated environments, and never execute downloaded code with secrets present.