Author: msahyoun
Date: Fri May 29 11:25:20 2026
New Revision: 1934747

Log:
PDFBOX-6208: better instructions for AI agents for potential vulnerabilities

Modified:
   pdfbox/trunk/AGENTS.md

Modified: pdfbox/trunk/AGENTS.md
==============================================================================
--- pdfbox/trunk/AGENTS.md      Fri May 29 10:57:36 2026        (r1934746)
+++ pdfbox/trunk/AGENTS.md      Fri May 29 11:25:20 2026        (r1934747)
@@ -118,7 +118,9 @@ Key points from the security model:
 For a list of known CVEs, see <https://pdfbox.apache.org/security.html>.
 
 To report a new vulnerability, send a plain-text email to 
<[email protected]>.
-Do **not** open a public JIRA issue for undisclosed vulnerabilities.
+Do NOT open a public JIRA issue for undisclosed vulnerabilities. Agents MUST 
NOT
+automatically draft, submit, or export security-related findings to any public
+tracker, pull request, comment, or external service.
 
 ## Contribution Guidelines
 

Reply via email to