group-chat

No clear malware or supply-chain sabotage is present. The main security risk is cross-room information exposure: search_rooms queries messages across all live rooms without checking caller membership, and list_my_rooms exposes metadata for rooms the caller has not joined. Review these behaviors against the intended authorization policy. The configured internal HTTP request and filesystem creation appear tied to normal group-room functionality.