Sorry - couldn't find a security.txt but thought I should alert you your API is currently vulnerable to prompt injection on at least a few of the fields in the structured JSON you send when analysing the game.
Happy to give more details if there's any way to get in touch outside this thread.
Happy to give more details if there's any way to get in touch outside this thread.