PkgRadar

Cargo · crates.io

recursive-agent

Credential File Packaged: recursive-agent-0.6.0/website/.npmrc

Why PkgRadar flagged 0.6.0

SeveritySignalEvidence
highCredential File Packagedrecursive-agent-0.6.0/website/.npmrc · recursive-agent-0.6.0/website/.npmrc
mediumRemote Payloadmatched "curl " · recursive-agent-0.6.0/src/tools/a2a.rs
mediumRemote Payloadmatched "curl " · recursive-agent-0.6.0/src/tools/policy_sandbox.rs

Scanned versions

VersionVerdictScoreScanned (UTC)
0.6.0High risk692026-06-03

Block this in CI

PkgRadar gates recursive-agent (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem cargo [email protected]