The Engine is a sensitive component as it handles device interaction and execution of custom scripts.
If you discover a security flaw in the runner or the action execution logic:
- Do not open a public issue.
- Email your findings to cv.hovanthanh@gmail.com.
- Code injection via script variables.
- Resource exhaustion/Memory leaks in long-running state machines.
- Unsanitized input in platform-specific drivers.