Please report suspected security issues privately through GitHub's Report a vulnerability feature. Do not open a public issue with exploit details.

The plugin is designed to read ExileCore's visible game state, render an overlay, play local sounds, and save local settings. It does not require network access or credentials.