Pg Aiguide

Detected

• Talks to external services1 places

  Makes outbound requests. The hosts are listed so you can see where data goes.

  github.com

• Reads environment variables in bulk1 places

  Copies or enumerates the whole environment, which can include keys meant for other tools.

• Runs shell commands15 places

  Spawns processes on your machine. Expected for command, browser and build tools.

• Reads or writes other agents' configuration1 places

  Touches folders such as ~/.claude, ~/.codex or ~/.cursor, which hold settings and sometimes keys.

• Reads local configuration files3 places

  Loads a .env, .npmrc or config file. Normal for a server that needs an API key.

• Contains instructions aimed at AI agents6 places

  Text in code or agent-facing files that steers a model. Worth reading before you trust it.

• Passes model output on without checks1 places

  Model output reaches HTML, SQL or a shell without validation.

Not detected: sends conversation content outward, accesses credential files, uses elevated privileges, installs itself to run later, matches a known malicious pattern.

Dependencies with known advisories

None found in the lockfiles and manifests checked against OSV.dev.

Left out of the profile

31 pattern matches in documentation, configuration or CI files were recorded but are not part of the profile, because they do not run when the server does. The owner dashboard lists them.