If you discover a security vulnerability in singularity-claude, please report it responsibly.
Do NOT open a public issue.
Instead, email the maintainer directly or use GitHub's private vulnerability reporting.
singularity-claude stores data locally at ~/.claude/singularity/. Security concerns include:
- Score/telemetry data integrity — JSON files should not be tampered with
- Script injection — Shell scripts must sanitize inputs
- Skill content injection — Generated SKILL.md files should not contain malicious instructions
| Version | Supported |
|---|---|
| 0.1.x | Yes |