Report vulnerabilities through the private GitHub Security Advisory form for ketherworks/atcoder-mcp-server. Do not include judge cookies, account tokens, source code, or other secrets in a public issue.

This server is read-only. It must not gain submission, code-execution, credential-forwarding, or challenge-bypass behavior without a separate threat model and explicit security review.