Do not include Getui credentials, tokens, customer identifiers, message payloads, or production logs in public issues.

The Skill must never contain real appId, appKey, masterSecret, access tokens, or local credential files.

Report security issues through the repository owner's private security reporting channel. If the public repository enables GitHub Security Advisories, use "Report a vulnerability".

Include the affected Skill version, Agent, operating system, and a sanitized reproduction. Replace all credentials and customer data with placeholders.