0xinsider-api-access

SUSPICIOUS. The core API/MCP access behavior is mostly coherent and routes data to same-org 0xinsider hosts, but the local CLI install instructions appear inconsistent with the vendor's documented package name. That mismatch makes the supply-chain footprint broader and less trustworthy than the stated purpose warrants, though there is no strong evidence of credential theft or malicious exfiltration.