Skip to content

Latest commit

 

History

History
17 lines (11 loc) · 875 Bytes

SECURITY.md

File metadata and controls

17 lines (11 loc) · 875 Bytes
Raw

Security Policy

Data sensitivity

The sensitive data that is currently handled by Magic CLI is:

  • OpenAI API key, which is stored in the configuration within the user home directory (~/.config/magic_cli).

    There are plans to store this token in the system's secure key storage, but this is not yet implemented.

  • Embeddings of the shell history for the magic-cli search command, which are stored in the configuration within the user home directory (~/.config/magic_cli) and are generated using the LLM provider of choice.

Reporting a Vulnerability

Report vulnerabilities to security [at] guywaldman.com.

They will be handled ASAP. If the vulnerability is accepted, a mitigation will be implemented and a proper disclosure will be released. The triage and mitigation process will depend on the potential severity and impact of the vulnerability.