OS-Tools runs with administrator rights on machines it is repairing, so security issues are treated as high priority.

Please do not open a public issue. Use GitHub's private vulnerability reporting ("Security" tab, "Report a vulnerability") on this repository. Include steps to reproduce, affected OS, and impact.

• No shell. External commands are executed with explicit argument arrays.
• Validated input. Package IDs and fix IDs are validated before use.
• Preview first. Every change is an explicit plan the user can inspect or dry-run.
• Fail closed. If the audit log cannot be written, no changes are made.
• Least privilege. Read-only features work unprivileged. The tool never self-elevates.
• No redistribution of third-party binaries. Tools are installed from official repositories through native package managers.
• Local GUI is a hardened server. Loopback only, per-launch token, Host header validation, CSRF header, strict CSP. The browser cannot submit commands, only intents.
• No telemetry.
• No secrets in the repository. Configuration uses placeholders and per-user config files.