Foremerge

Detected

• Matches a known malicious pattern3 places

  A YARA signature for malware, webshells or miners matched. Check the file before running anything.

• Runs shell commands4 places

  Spawns processes on your machine. Expected for command, browser and build tools.

• Reads or writes other agents' configuration11 places

  Touches folders such as ~/.claude, ~/.codex or ~/.cursor, which hold settings and sometimes keys.

• Reads local configuration files1 places

  Loads a .env, .npmrc or config file. Normal for a server that needs an API key.

• Installs itself to run later9 places

  Writes startup entries, cron jobs or state files that outlive the session.

• Contains instructions aimed at AI agents6 places

  Text in code or agent-facing files that steers a model. Worth reading before you trust it.

Not detected: reads environment variables in bulk, sends conversation content outward, accesses credential files, uses elevated privileges.

Dependencies with known advisories

None found in the lockfiles and manifests checked against OSV.dev.

Left out of the profile

14 pattern matches in documentation, configuration or CI files were recorded but are not part of the profile, because they do not run when the server does. The owner dashboard lists them.