Only the latest release of the l3a0 plugin is supported. Update with claude plugin update l3a0@l3a0 before reporting an issue.

Please report vulnerabilities privately via GitHub's private vulnerability reporting for this repository. If that page is unavailable, open a GitHub issue asking for a private contact channel — do not include exploit details in the public issue.

You can expect an acknowledgement within a week. Please allow a fix to land before public disclosure.

The skills in this repo run locally and drive the user's own logged-in browser session and local app data (see each skill's README/SKILL.md for its exact access). Reports of particular interest:

• Anything that could exfiltrate highlight data or credentials off-machine (the pipeline is designed to be local-only; the capture receiver binds 127.0.0.1 and validates paths).
• Path injection or command injection via scraped page content or filenames.
• Prompt-injection vectors in skill instructions that could cause unintended actions.