agy-extensions

No direct evidence of malware exists in this configuration snippet. However, it auto-installs/executes an external dependency via `npx -y` without pinning shown here (supply-chain execution risk) and it starts a filesystem MCP server with access to the local project directory (`./`), which could expose sensitive files depending on the dependency’s filtering/permissions and who can interact with the MCP server.