ddg-agent-security-sweep@1.0.0

Publisher claims: "Run one release-time security sweep over an agent's own surfaces: prompt-injection exposure, MCP tool permission boundaries, secret leaks, and dependency risk. Use before tagging a release, after adding a tool, or when a scanner flags your repo. Four paid calls per sweep, all inline, no operator queue." Observed in sandbox: no network, touches nothing outside the project, writes no memory.