Please report suspected security issues through a private GitHub security advisory rather than a public issue.

The public Quarry plugin contains no credentials, analytics, telemetry, or background network service. It uses only the research tools explicitly available in the user's agent environment.