If you discover a security flaw that could leak Lichess bot API tokens or compromise system environments via Stockfish path variables, please do not open a public issue. Reach out privately via the maintainer's GitHub profile. We review security reports promptly.