AI Clip Assembler is a local-first desktop video project. Security reports are welcome, especially issues involving local file access, project file handling, generated exports, dependency vulnerabilities, or accidental disclosure of media paths, frames, credentials, or user footage.

The project is pre-1.0. Security fixes target the current main branch unless a maintained release branch exists.

Please do not disclose vulnerabilities in a public GitHub issue.

Report privately through GitHub's private vulnerability reporting for this repository if it is enabled. If it is not enabled, contact the maintainer through the GitHub profile associated with this repository and include:

• A concise description of the issue.
• Steps to reproduce.
• Impact and affected files or commands.
• Any proof-of-concept files, redacted where needed.
• Whether private media, credentials, or local paths may be exposed.

The maintainer will acknowledge valid reports as soon as practical, investigate, and coordinate a fix before public disclosure. Please avoid accessing, copying, or sharing anyone else's private footage or credentials while testing.