agentation

SUSPICIOUS: mostly coherent with a UI annotation/MCP purpose, but the footprint is broader than a simple React helper. Main concerns are transitive skill installation, unpinned npx execution, third-party installer chaining, multi-agent config modification, and autonomous watch-loop behavior. Data flow is largely local and purpose-aligned, so this is not confirmed malicious.