Security Policy

Please report suspected credential exposure, unsafe device operations, path traversal, command injection, or MCP protocol vulnerabilities privately to the repository owner through GitHub’s private vulnerability reporting feature.

Do not include real Roku developer passwords, authentication tokens, customer data, console logs, screenshots, or production artifacts in a public issue.