Report a vulnerability privately through GitHub's private vulnerability reporting, not in a public issue.

In scope: anything that lets untrusted text — a pull request's description or diff, a review comment, a design file, a page under verification — make an agent run commands, write files, or post to GitHub or Jira beyond what the command it is running promises. Include the plugin and version, the input that triggered it, and what the agent did.