If you discover a security vulnerability in any Floe Labs repository, do not open a public issue. Instead:
- Email: security@floelabs.xyz
- Include: description of the vulnerability, steps to reproduce, and potential impact
- Response time: We will acknowledge receipt within 48 hours and provide a detailed response within 7 business days
| Component | Version | Supported |
|---|---|---|
Platform CLI (npm @floelabs/cli) |
0.1.x | ✅ |
AgentKit (npm floe-agent) |
0.6.x | ✅ |
AgentKit (PyPI floe-agentkit-actions) |
0.5.x | ✅ |
MCP Server (@floelabs/mcp-server) |
0.3.x | ✅ |
We follow responsible disclosure practices. We ask that you:
- Give us reasonable time to fix the issue before public disclosure
- Make a good-faith effort to avoid privacy violations, data destruction, and service interruption
- Do not access or modify other users' data
We will not pursue legal action against researchers who follow this policy.