Security

SECURITY.md

Security Policy

Reporting a Vulnerability

Please open a private issue or email the maintainer (add contact) with details.
Do not disclose publicly until we confirm a fix or mitigation.

Secrets

Never commit secrets. Store them in ~/.avibe/config/config.json or a secret manager. Existing installs may still expose the legacy ~/.vibe_remote/ symlink for compatibility.
Tokens required: Slack tokens, and the Claude/Anthropic credentials used by claude-code-sdk (e.g., ANTHROPIC_API_KEY).

There aren't any published security advisories