research-codebase

SUSPICIOUS: the core research behavior matches the stated purpose, but the footprint includes external data flows and non-official tooling (`linearis`) that are broader than strictly necessary for local codebase research. This is not confirmed malware, but it carries medium risk due to mandatory sync behavior, third-party integrations, and broad agent capabilities.