Please report security vulnerabilities by emailing security@example.com or opening a private issue on GitHub.

• Never commit .env files with real credentials
• Validate all file paths before processing
• Sanitize filenames to prevent path traversal
• Use temporary directories for intermediate files