# Security

Report privately through Gitea. Inputs are untrusted and retained locally; no recipe may execute code or request a URL. Expansion and conversion are capped and losses surfaced.