The approved dev/null device key can act as an account credential. Please avoid posting a key, callback URL, account response, or detailed vulnerability report in a public issue.

Report a vulnerability privately through the repository's Security → Report a vulnerability page. If private reporting is unavailable, contact the maintainer through their GitHub profile before sharing details.

If your own key may be compromised, revoke Omarchy dev/null Log under dev/null Settings → Devices. Removing the plugin does not revoke the device on dev/null.