MaintainerLens is designed for low-risk maintainer assistance.

• It does not execute code from pull requests.
• It does not require a database or external service.
• It does not require an OpenAI API key.
• It does not log GitHub tokens.

The default workflow uses pull_request, not pull_request_target. Maintainers should be careful with pull_request_target because it runs with different trust boundaries and can expose privileged tokens when combined with unsafe checkout or script execution patterns.

Recommended minimum permissions:

permissions:
  contents: read
  issues: write
  pull-requests: read

MaintainerLens comments are automated review preparation. Maintainers should review the underlying issue or pull request before labeling, closing, merging, or requesting changes.

AI-assisted mode, when added, should be opt-in and privacy-aware. Repositories should be able to understand what content is sent to an external provider and disable that behavior entirely.

Please do not open public issues for security-sensitive reports. Use the repository security advisory flow if available, or contact the maintainers through their published security contact.