glips--figma-context-mcp/SECURITY.md

Security Policy

Reporting a Vulnerability

Please report security vulnerabilities responsibly.

Do NOT open a public GitHub issue for security vulnerabilities.

How to Report

1. GitHub Security Advisories: Report privately
2. Email: Contact the maintainers directly

Response Timeline

• Acknowledgment: 48 hours
• Assessment: 1 week
• Fix: Based on severity

Supported Versions

Version	Supported
Latest	✅

MCP Security Best Practices

1. Review server permissions before connecting
2. Use environment variables for secrets
3. Limit server access to required tools only
4. Keep dependencies updated