Safety and privacy

Safety you can read.

NAP is a seatbelt. It reduces mistakes. It can't promise there will be none.

Risky commands stop first.

NAP checks where a command really lands, not just how it is written.

npm testRuns

npm install left-pad-proWaits for you

rm -rf C:\Users\danaNever runs

Stop everything
One button stops an agent and everything it started.
Unfamiliar folders open restricted
Nothing runs by itself until you trust the folder.
Secrets stay locked
Passwords and keys are never read or shown.

NAP recognises known risky patterns. Anything it does not recognise goes to Claude Code's own permission check.
An agent running as you can still get around it. For sensitive work, use an isolated environment.
Nothing here replaces reading what you approve.

This is exactly what leaves it.

What	Does it leave?	Details
Your code and files	No	NAP sends nothing about your project. Claude Code, which you run, talks to Anthropic as it always does.
Analytics	No	No telemetry and no trackers, in the app or on this site.
Model and version info	Reads only	Once a day NAP reads public catalogs. Plain requests, nothing about you. You can turn it off.
New packages	Names only	The name of a package is checked against the public registry before it is installed.
An account	Not needed	NAP runs without an account.