Security fixes are provided for the latest release.

Please use GitHub's private vulnerability reporting for this repository. Do not open a public issue with exploit details or sensitive data. Include the affected version, reproduction steps, impact, and any suggested mitigation.

Memories are local Markdown files. The extension makes no network requests, but applicable instructions may be included in prompts sent by GitHub Copilot CLI. Never store credentials, customer data, regulated data, or private keys. The built-in detector reduces accidental secret storage but is not a guarantee.