If you discover a security vulnerability in this plugin, please report it privately to security@altimate.ai. Do not open a public GitHub issue for security matters.

Include in your report:

• A description of the issue and its impact.
• Steps to reproduce.
• The plugin version (.claude-plugin/plugin.json → version) and, if relevant, the Claude Code version.

We will acknowledge receipt within 3 business days and aim to provide a status update within 10 business days.

This plugin's skill forwards the user's task text to the altimate-code CLI, which then contacts the Altimate LLM gateway (or the user-configured provider) to plan and execute the work. Concretely:

• User task prompt → passed verbatim to altimate-code run → forwarded to Altimate's LLM gateway.
• Warehouse queries and dbt commands → executed locally under your credentials by the CLI; not forwarded.
• Query results and file edits → produced locally; the CLI writes an output file which the plugin surfaces back to Claude.

If you do not want prompts to leave Claude Code's process, do not install this plugin. Adding the marketplace only makes it discoverable in /plugin; the plugin is not installed or runnable until you explicitly /plugin install altimate-code@altimate-claude-plugin.

For the complete privacy policy covering the plugin and the altimate-code CLI, see PRIVACY.md.

Only the latest published version receives security fixes.