Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

thejaytea/writingtools

              main @ 4ed1fba
            

Fixes

CVEs

MEDIUM

Peak severity

Highlights

Information Disclosure: 1 prior fix. Scrutinize any change in this area.

macOS/WritingTools/App/AppState.swift: most-fixed (1 issue). Treat as high-risk during review.

0 high-severity fixes in this history; regressions here are high-impact.

Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Information Disclosure: Custom AI provider API keys were previously stored in insecure plaintext command properties, making them vulnerable to unauthorized exposure or accidental leakage through application state serialization. Developers must ensure all API keys are strictly stored and accessed via the macOS Keychain rather than local application state variables.