Please report suspected security issues privately using GitHub's Report a vulnerability feature (the repository's Security tab) rather than opening a public issue. We will acknowledge your report and coordinate a fix and disclosure timeline.

standcloud-integration never stores your API key. Prefer the STANDCLOUD_API_KEY environment variable over --api-key, which can leak into shell history and the process list. Do not commit API keys or exported report CSVs — the repository's .gitignore already excludes *.csv.