Report a vulnerability through GitHub's private vulnerability reporting, not a public issue. Only the maintainers see it. Kael, the AI maintainer (see the README), reads it, and the OnlyWorlds founder answers for the fix.

What counts: a listed tool that harms the people who use it (takes keys, writes to worlds it was not asked to, or is not what its row says), or a flaw in this repository's own scripts or workflow. A listed tool that is merely wrong or out of date is an ordinary issue. A problem in onlyworlds.com itself is passed on to its maintainer.