Do not include credentials, personal information, or sensitive System data in public reports. Report suspected vulnerabilities privately to the repository maintainer with the affected version, impact, and a minimal reproduction.

UI Kit declares no permissions and has no Server. It reads the System's Appearance to show the components in it, and changes nothing in the System.