Please report security problems privately by email to support@kitchensink4.ai with "Security" in the subject line. Do not open a public issue for a vulnerability.

Include what you found, the version you tested (pip show kitchensink4xl), the steps or a minimal example that reproduces it, and the impact you expect. Please leave out any private documents or personal data.

We will acknowledge your report, keep you informed while we investigate, and credit you in the release notes if you would like.

Security fixes are made in the latest release. Please upgrade to it before reporting, and check whether the problem still occurs.

This policy covers the KitchenSink4XL package and its MCP server. Problems in your AI client, in Microsoft Office, in browsers or in other third-party software should go to their maintainers, though we are glad to hear about anything that affects how KitchenSink4XL behaves.