| Version | Supported |
|---|---|
| 0.4.x | ✅ |
| < 0.4 | ❌ |
If you discover a security vulnerability in pulser, please report it responsibly:
- Do not open a public issue
- Email security@thestack-ai.com with:
- Description of the vulnerability
- Steps to reproduce
- Potential impact
- You will receive a response within 48 hours
- A fix will be prioritized and released as a patch version
pulser runs locally and processes SKILL.md files. Security concerns include:
- Path traversal in file scanning
- Arbitrary code execution via malformed skill files
- Dependency supply chain risks
Thank you for helping keep pulser safe.