If you discover a security vulnerability in this project, please report it responsibly:

1. Do not open a public GitHub issue
2. Use GitHub Security Advisories (private report to the maintainer)
3. Include a description of the vulnerability and steps to reproduce

• Never commit your Discord bot token to version control
• Use environment variables or a .env file (already in .gitignore)
• Rotate your token immediately if it is ever exposed
• Give the bot only the permissions it needs for your use case