This repository publishes documentation and the datamagic skill for coding agents. The hosted product at datamagic.chat is operated separately.

Please do not open a public GitHub issue for security reports.

Prefer one of these private channels:

1. GitHub private vulnerability reporting: Open a security advisory
2. If that form is unavailable, email the maintainers through the HKUST Dial Lab contact listed on the project homepage

Include:

• A description of the issue and its impact
• Reproduction steps or a proof of concept
• Affected files, skill instructions, or workflow names
• Whether the issue is in this repository, the skill package, or the hosted product

We aim to acknowledge reports within 3 business days and to share a remediation plan or status update within 7 days. Critical issues that affect users of the skill or plugin packaging are prioritized first.

Please give us a reasonable window to patch before any public disclosure.