This is a private proprietary repository.
Do not open public issues for security-sensitive reports.
- Report vulnerabilities through the private maintainer channel used for this project.
- Include reproduction steps, affected app version, Android version, and expected impact.
- If the report involves provider credentials or captured screen content, redact sensitive values before sharing.
Security reports are especially relevant for:
- API key handling
- Overlay abuse risk
- MediaProjection handling
- unintended data persistence
- network request privacy
- permission misuse