Foundation Models Bench uses synthetic fixtures and should not require user data.

Please report security issues privately if you find:

• A benchmark path that reads contacts, reminders, health data, documents, or other private user data.
• A tool fixture that performs real side effects.
• A report that leaks hostnames, user names, tokens, paths, provisioning details, or secrets.
• A PCC or provider-adapter path that mishandles credentials.

Open a private security advisory on GitHub or contact the maintainer directly.

Do not include secrets, private prompts, or personal data in issues, pull requests, fixtures, or benchmark results.