| 1 | # Security Policy |
| 2 | |
| 3 | ## Supported Versions |
| 4 | |
| 5 | We provide security updates for the latest version of PPT Master. |
| 6 | |
| 7 | | Version | Supported | |
| 8 | |---------|-----------| |
| 9 | | Latest | Yes | |
| 10 | | Older | No | |
| 11 | |
| 12 | ## Reporting a Vulnerability |
| 13 | |
| 14 | **Please do not report security vulnerabilities through public GitHub Issues.** |
| 15 | |
| 16 | If you discover a security issue, please report it privately by emailing: |
| 17 | |
| 18 | **heyug3@gmail.com** |
| 19 | |
| 20 | Include in your report: |
| 21 | |
| 22 | - A description of the vulnerability |
| 23 | - Steps to reproduce the issue |
| 24 | - The potential impact |
| 25 | - Any suggested fix, if you have one |
| 26 | |
| 27 | We will acknowledge your report within **72 hours** and aim to provide a resolution timeline within **7 days**. |
| 28 | |
| 29 | ## Scope |
| 30 | |
| 31 | This policy covers the PPT Master source code in this repository, including: |
| 32 | |
| 33 | - Python scripts in `skills/ppt-master/scripts/` |
| 34 | - Post-processing pipeline (`total_md_split.py`, `finalize_svg.py`, `svg_to_pptx.py`) |
| 35 | - Project management utilities |
| 36 | |
| 37 | Out of scope: |
| 38 | |
| 39 | - Third-party AI editors or APIs (Claude, Cursor, GitHub Copilot, etc.) |
| 40 | - Generated PPTX output files |
| 41 | - User-provided source documents |
| 42 | |
| 43 | ## Disclosure Policy |
| 44 | |
| 45 | We follow responsible disclosure. Once a fix is available, we will publish a GitHub Security Advisory crediting the reporter (unless they prefer to remain anonymous). |
| 46 |