Please report security issues privately to the repository maintainers rather than publishing exploit details immediately.
Robin is an experimental local-first assistant. Treat model-generated text and actions as untrusted. Computer-control tools must enforce permissions independently of the model.
Do not submit personal logs, conversation histories, credentials, or private files in a security report.