Security

SECURITY.md

Security Policy

Supported Versions

Version	Supported
1.0.x	Yes

Reporting a Vulnerability

If you discover a security vulnerability, please report it via email to whystrohm@gmail.com.

Do NOT open a public GitHub issue for security vulnerabilities.

Scope

This skill runs entirely within Claude Code. It:

Fetches publicly accessible web pages (same as a browser)
Does not store, transmit, or log any data
Does not require API keys or credentials
Processes everything locally within the Claude Code session

Data Handling

Website content is fetched and analyzed within the session only
No data is sent to WhyStrohm or any third party
Voice profiles are displayed to the user and not persisted

There aren’t any published security advisories