Purple

Detected

• Talks to external services5 places

  Makes outbound requests. The hosts are listed so you can see where data goes.

  api.github.com, api.transip.nl, api.us.ovhcloud.com

• Reads environment variables in bulk1 places

  Copies or enumerates the whole environment, which can include keys meant for other tools.

• Sends conversation content outward1 places

  Logs or forwards prompts, messages or tool results to a service outside your machine.

• Runs unpinned packages at runtime4 places

  Executes npx or uvx without a version, so a compromised upstream release would run.

Not detected: runs shell commands, reads or writes other agents' configuration, accesses credential files, uses elevated privileges, installs itself to run later, matches a known malicious pattern.

Dependencies with known advisories

None found in the lockfiles and manifests checked against OSV.dev.

Left out of the profile

7 pattern matches in documentation, configuration or CI files were recorded but are not part of the profile, because they do not run when the server does. The owner dashboard lists them.