Security fixes are applied to the latest commit on the default branch.

The workbench protects against accidental overwrites, path traversal, stale staged changes, partial writes, and unreviewed deletion in a local Vault.

It does not protect against an attacker who already has write access to the Vault, the configured system directory, the Skill installation, or the agent's host account. Stage hashes detect drift; they do not authenticate bundle authors. Vault sync providers and shared folders must therefore be treated as part of the trusted computing boundary.

The Skill does not send Vault data over the network. The surrounding agent or host application may have separate capabilities and policies; review those before processing sensitive notes.

Please use GitHub's private vulnerability reporting for this repository. Do not include real Vault contents, credentials, private paths, or other personal data. Provide a minimal synthetic reproduction whenever possible.