axelfreeman__marketing-mindset/SECURITY.md

Security Policy

Reporting a Vulnerability

If you find a security vulnerability in marketing-mindset, please report it responsibly.

Preferred: GitHub Security Advisories (private)

1. Open the Security tab of this repository
2. Click "Report a vulnerability"
3. Describe the issue and steps to reproduce

This keeps the report private until a fix is ready.

Alternative: email

Contact axel@axelfreeman.com with:

• A description of the vulnerability
• Steps to reproduce
• Your assessment of impact

What to expect

• Acknowledgment: within 48 hours
• Status update: within 7 days
• Public disclosure: after a fix is released, or 30 days after the report (whichever comes first)

Scope

• The skill content: SKILL.md, SKILL.lite.md, SKILL.deepseek-flash.md, llms.txt, AGENTS.md
• Scripts in this repository
• The install mechanism (npx skills add axelfreeman/marketing-mindset)

Out of scope

• Issues with third-party platforms (skills.sh, GitHub, OpenRouter) — report those to the respective vendor
• Marketing or positioning feedback — use regular issues instead

Supported versions

Only the latest version on the master branch is supported. Fixes are not backported to older release tags.