zhuyansen/new-term-radar is a tool that collects the names of AI models, products, and repositories that appear every day. Its purpose is to pick up neologisms before keyword tools can find them, by sweeping X, Hugging Face, GitHub, and sitemaps. Commit 0b6b164 on October 26, 2026 newly created PRIVACY.md and added documentationUrl, supportUrl, and privacyPolicyUrl to .claude-plugin/plugin.json. The change consists of these two files, 38 added lines, and no deletions.
This manifest is the Claude Code plugin configuration. According to the commit description, Anthropic's directory reads documentationUrl from plugin.json, and if that value is absent, it uses the first link in the README as the documentation instead, and the review checks whether the publisher has described the data covered by the plugin's privacy policy. In other words, this change is metadata augmentation for distribution.
PRIVACY.md states that the command line, skill, and MCP server all run on the user's own computer or on the author's own GitHub Actions, that the author does not operate a server, and that no accounts, telemetry, or analytics are collected. The destinations reachable without keys are Hugging Face's trending models and Spaces, GitHub repository search and READMEs, and the sitemaps listed in config.json (the example configuration names twelve AI tool, MCP, and skill directories), while a configured GITHUB_TOKEN is passed only to GitHub and merely raises the call limits. For the providers for which keys are configured, AIsa handles X posts and Reddit/YouTube searches, Google Ads volume, DataForSEO Trends, domain data, and the term judgment model; GoAnyAPI handles related queries and one country's Trends time series, search, and Chrome Web Store reviews; TrustMRR handles the verified revenue list; Search Console handles queries your own site has received; and Resend handles only sending reports to the RADAR_EMAIL_TO address. Keys go only to their own respective providers. What remains locally is only radar.db under RADAR_STATE (default ./state) along with snapshots and caches, and keys are not recorded there.
That said, this commit is a documentation cleanup that does not change any code. The contents of PRIVACY.md are the author's own account, and the repository does not release a separate audit or verification material. The premise that data does not go outside the provider when a key is set also depends on the document. Whether it will actually be listed in the Anthropic directory cannot be confirmed from this commit alone. Rather than waiting for a feature improvement, it is right to view it as an opportunity that, when you are curious about where the data goes, you can now read about it inside the repository.