Agent DevTools is currently an alpha project without a stable release. The 0.2.0a1 build is a pre-release; security fixes are applied to the latest code on the main branch.

Do not disclose vulnerabilities, credentials, private traces, or sensitive screenshots in a public issue.

Use GitHub's private vulnerability reporting from the repository's Security tab. If that option is unavailable, open an issue containing no sensitive details and ask the maintainer to establish a private contact channel.

Include, when possible:

• the affected version or commit;
• a minimal reproduction;
• the expected and observed behavior;
• the potential impact;
• suggested mitigations, if known.

Agent DevTools reports may contain URLs, action arguments, typed text, screenshots, page metadata, and error details. Review and redact generated traces before sharing them. Browser Use metadata redaction is enabled by default and covers common credential-shaped keys, tokens, and URL query values; it does not alter screenshots or guarantee that arbitrary sensitive text is identified.

Keep model-provider keys in environment variables. Agent DevTools should not write provider keys to traces or reports. Revoke any credential that may have been committed, logged, or shared accidentally.

The local control center does not provide a provider-key input or upload traces. It serves the selected trace workspace on loopback by default. A custom browser or desktop-style agent is recorded only when its actions pass through the documented observer/tool boundary; direct native calls are outside that scope.