openagent

SUSPICIOUS: mostly coherent identity-card tooling, but the footprint extends into third-party portrait generation, public image hosting/registry publication, local key creation, and optional privileged agent provisioning. The pinned npm usage is relatively normal; the main concerns are external data flows and the broadened operational scope beyond simple persona rendering.