Please report security issues privately through GitHub's security-advisory interface for this repository. Do not open a public issue for credential exposure, remote-write authentication flaws, or executable-integrity concerns.

Include the affected version or commit, reproduction steps, and the expected impact. Please allow time for investigation before public disclosure.

Prometheus credentials are stored as Raycast password preferences and used only to authenticate requests to the user-configured endpoint. They must never be logged, included in metric labels, or committed to this repository.