This starter should never contain credentials, personal data, private notes, or local Obsidian configuration.

Report vulnerabilities through GitHub private vulnerability reporting in the repository's Security tab. Sensitive information must never be included in a public issue.