Please report suspected vulnerabilities privately through GitHub's security advisory feature rather than a public issue.

Never include live credentials, private endpoint details, or an unredacted configuration in a report. agentctl import attempts to redact secret-shaped values, but reporters should still inspect its output before sharing it.