Skip to content

Security: skrun-dev/skrun

SECURITY.md

Security Policy

Reporting a Vulnerability

Do not open a public issue.

Email: [email protected]

You will receive an acknowledgment within 48 hours. We will provide a timeline for a fix within 5 business days.

Supported Versions

Version Supported
0.x Yes

Scope

  • @skrun-dev/* npm packages
  • Agent runtime execution (sandbox, tool calling, LLM routing)
  • Registry API (auth, push/pull, POST /run)

Out of Scope

  • Social engineering
  • Denial of service attacks
  • Issues in third-party dependencies (please report upstream)
  • Vulnerabilities in LLM provider APIs

There aren’t any published security advisories