Please report security vulnerabilities privately via GitHub Security Advisories:

1. Go to https://github.com/SwordfishTrumpet/homewizard-cli/security/advisories/new
2. Describe the vulnerability in detail
3. Include steps to reproduce if possible

We aim to acknowledge reports within 48 hours and provide a fix within 7 days.

Do not open a public issue for security vulnerabilities.