If you've ever looked at the way the NSA treats exploits, remote access software and such, they're very careful about deploying them against people who may be able to detect and analyze them themselves.

Putting such things in public code like that which would both directly point the finger at them and possibly turning secrets into widespread knowledge in the security community would be... incredibly stupid.

It even runs locally from files - doesn’t need network access at all.

"Please don't comment about the voting on comments. It never does any good, and it makes boring reading."

https://news.ycombinator.com/newsguidelines.html