Kun

Least-privilege permissions

• Run Kun in a restricted user account — Create a separate login on your computer with limited access to files and folders. This prevents Kun from accidentally (or maliciously) modifying important system files if something goes wrong.
• Limit folder access — Only give Kun permission to access the specific folders where your project files live. Block access to Desktop, Documents, and system directories unless absolutely necessary.
• Review API key storage — If Kun uses passwords or API keys (credentials that unlock external services), check that they're stored in encrypted files, not saved in plain text where they could be stolen.
• Disable unnecessary features — Turn off any Kun capabilities you don't use (like file uploads or cloud integrations). Fewer active features mean fewer potential security gaps.

Network isolation

• Restrict outbound connections — Use your firewall or router settings to block Kun from contacting unknown external servers. Only allow connections to services you explicitly need (e.g., your company's API).
• Disconnect from the internet when not needed — If you're using Kun for local work only, disconnect from Wi-Fi or ethernet to eliminate any risk of data being sent outside your computer.
• Use a VPN for external calls — If Kun must connect to online services, route that traffic through a VPN (Virtual Private Network) to encrypt it and hide what's being sent.

Monitoring

• Audit Kun's actions daily — Check your computer's file access logs weekly to see what files Kun has read or modified. Flag any unexpected activity (like access to password folders or system directories).
• Track dependency updates — Kun relies on third-party code libraries (like open-source tools). Subscribe to security alerts for these libraries and update them immediately if vulnerabilities are found.
• Log all user inputs — Enable logging so you have a record of what instructions you gave Kun and what it did. This helps you spot if something unexpected happened.

Red flags to watch for

• Early-stage software with few users — Kun is new and hasn't been widely tested. Expect bugs and security issues to emerge. Use it only for non-critical work until it matures.
• Unexpected file or folder access — If Kun accesses files outside your designated project folders, or if files go missing, shut it down immediately and investigate.
• Credentials appearing in logs or output — If you see API keys, passwords, or sensitive data printed on screen or saved in files, that's a serious leak. Stop using Kun and review all stored credentials.
• Strange network activity — If your internet slows down or security tools alert you to unusual outbound connections when Kun is running, terminate the process and check your firewall logs.