Do not post private exports, credentials or sensitive attachments in a public issue. Provide a minimal synthetic reproduction and describe the browser and operation. For a sensitive vulnerability, use a private security-reporting channel only if the repository owner has enabled one; this local package does not claim such a channel is already configured.
Chat content is untrusted input. Citation/source URLs are validated, raw HTML is inert and exported UI is static. Browser file permissions, local extensions and the OS are outside the app's trust boundary. This is not an encrypted archive format, OS-exclusive file lock or power-loss-safe database.