This repository scaffold is not a production service, but security issues are still welcome.
Please report:
- unsafe file handling
- unsafe plugin/editor behavior
- secrets accidentally committed into config or examples
- remote execution or untrusted manifest loading concerns
Do not commit credentials, cookies, tokens, or private Studio/API details into this repo.