affinity

This module is a JSON-RPC/SSE client that can invoke execution-capable remote tools (execute_script/evaluate_script/run_javascript) and will transmit user-supplied script code from local files to those tools when available. While there is a basic same-origin check for the discovered endpoint and a path-prefix guard in docs-dump, the overall design intentionally enables remote script execution and remote-controlled file writes. This looks more like a powerful automation/CLI tool than overt supply-chain malware, but it carries meaningful security risk if used with untrusted endpoints or attacker-controlled inputs.