Hister

Detected

• Talks to external services3 places

  Makes outbound requests. The hosts are listed so you can see where data goes.

  api.github.com, api.raindrop.io

• Sends conversation content outward1 places

  Logs or forwards prompts, messages or tool results to a service outside your machine.

• Accesses credential files13 places

  References SSH keys, cloud credential files or token stores.

• Uses elevated privileges1 places

  sudo, the Docker socket or a privileged container appear in shipped code.

• Contains instructions aimed at AI agents3 places

  Text in code or agent-facing files that steers a model. Worth reading before you trust it.

• Passes model output on without checks1 places

  Model output reaches HTML, SQL or a shell without validation.

Not detected: reads environment variables in bulk, runs shell commands, reads or writes other agents' configuration, installs itself to run later, matches a known malicious pattern.

Dependencies with known advisories

None found in the lockfiles and manifests checked against OSV.dev.

Left out of the profile

8 pattern matches in documentation, configuration or CI files were recorded but are not part of the profile, because they do not run when the server does. The owner dashboard lists them.