This repository contains automation scripts and evidence data only — no application code with user-facing attack surface.

If you find a security issue in the scripts (e.g. credential exposure, injection in PowerShell scripts):

1. Do not open a public issue.
2. Email the maintainer directly or use GitHub's private vulnerability reporting.

Response target: 48 hours.