Report a vulnerability

Security contact

Send your report to [email protected] with the subject ‘Security — SkadeTweaks’. The /.well-known/security.txt file also lists this contact.

Useful information

Include the affected URL, observed behaviour, potential impact and minimum steps needed to reproduce the issue. Provide a way to contact you.

Do not send passwords, tokens, third-party personal data or screenshots containing such information. Redact sensitive details.

Testing limits

This contact channel does not authorise intrusive testing. Do not access third-party accounts or data, modify or delete data, or disrupt the service. Load testing, denial-of-service attacks and social engineering are excluded.

Third-party services, including Discord, Google, Cal.com, RustDesk and the hosting infrastructure, are outside this scope. Report issues concerning them directly to those providers.

Follow-up and disclosure

Keep technical details confidential during the initial discussion to avoid exposing users. Remediation and disclosure arrangements are coordinated after the report is analysed. No rewards programme or contractual resolution deadline is offered.