flakehunt executes the test command you give it, repeatedly, with your environment. It makes no network calls of its own and writes only to temporary directories plus the --json/--md paths you pass.

Report vulnerabilities privately through GitHub's "Report a vulnerability" button on the Security tab of this repository, not in a public issue. Expect an acknowledgement within a week.