Tangelo runs only the tools bundled inside its own app, and it sends nothing over the network.

If you find a security problem, please do not open a public issue. Use GitHub's private vulnerability reporting instead.