Security fixes are released for the latest version of each skill in this repository. Please update to the latest release before reporting an issue.

Please do not open a public GitHub issue for security vulnerabilities.

Report them privately by one of these methods:

• GitHub private vulnerability reporting
• Email integrations@elasticemail.com with the subject Security: elasticemail-skills

Please include:

• A description of the issue and its impact (for example, instructions that could lead an assistant to leak an API key)
• Steps to reproduce, including the prompt and assistant used
• The affected skill and version

We will acknowledge your report, investigate, and keep you updated on the fix. Please give us reasonable time to release a fix before disclosing the issue publicly.

If you think an API key has been exposed (in a commit, log, issue, prompt transcript or screenshot), revoke it right away in your Elastic Email API settings and create a new one.