open/linkedin-studio
1
0
Fork 0
Code Issues Releases 1 Activity
linkedin-studio/SECURITY.md
Kjell Tore Guttormsen d71941072d docs(linkedin-studio): SECURITY.md Supported versions section (AAA+ D-axis, ORDRE D4-B) 
Adds the missing "## Supported versions" section — the one AAA+ D4
gap this repo had among 17 artefact repos. States the actual verified
numbers (plugin.json 0.8.0, tags v0.4.0-v0.8.0, single pre-1.0 line)
and the support level (latest 0.x only, no backports), not just a
version table.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_015fkBTBLLH3ZZdCBLBC2WEC
2026-08-21 10:31:39 +02:00

1.5 KiB
Raw Blame History

Security Policy

Reporting a Vulnerability

If you discover a security vulnerability in this plugin, please report it responsibly.

Do NOT open a public issue for security vulnerabilities.

Report privately to security@fromaitochitta.com. Canonical repository: https://git.fromaitochitta.com/open/linkedin-studio

Please include the affected version or commit, a minimal reproduction, and the impact you see. We acknowledge every report within 5 working days, agree a fix and disclosure timeline with the reporter, and aim to disclose within 90 days of the initial report.

Supported versions

Version Supported
0.8.x ✅
< 0.8 ❌

This plugin has not reached 1.0 yet: it is a single, continuous 0.x release line (no parallel maintenance branches), and only the latest 0.x release receives security fixes — there are no backports to older 0.x versions. See CHANGELOG.md for release history.

Security Considerations

This plugin:

  • Does not store credentials or API keys
  • Does not make external network requests (except when using WebFetch for URL processing)
  • Does not execute arbitrary code
  • Stores all data locally in markdown files

User Data

  • The config/user-profile.local.md file contains personal preferences
  • This file is gitignored by default to prevent accidental commits
  • Review your .gitignore before pushing to ensure no personal data is committed

Dependencies

This plugin has no external dependencies beyond Claude Code itself.