Arcadedb

Detected

• Sends conversation content outward1 places

  Logs or forwards prompts, messages or tool results to a service outside your machine.

• Runs shell commands7 places

  Spawns processes on your machine. Expected for command, browser and build tools.

• Reads or writes other agents' configuration1 places

  Touches folders such as ~/.claude, ~/.codex or ~/.cursor, which hold settings and sometimes keys.

• Runs unpinned packages at runtime13 places

  Executes npx or uvx without a version, so a compromised upstream release would run.

Not detected: reads environment variables in bulk, accesses credential files, uses elevated privileges, installs itself to run later, matches a known malicious pattern.

Dependencies with known advisories

None found in the lockfiles and manifests checked against OSV.dev.

Left out of the profile

13 pattern matches in documentation, configuration or CI files were recorded but are not part of the profile, because they do not run when the server does. The owner dashboard lists them.