Do not report vulnerabilities using files that contain patient information. Describe the issue with synthetic filenames and sequences. The pipeline treats paths and sample names as untrusted and does not invoke a shell or external analysis executable.

Generated reports contain sample names, local paths, reference identifiers, and input checksums. Review them before sharing. For private disclosure, contact the repository owner through GitHub.