Does it make any requests not directed by the user? Undisclosed telemetry is common in this space unfortunately.
No, you got what's you write. If you want, you can see the run curl's command, save it in a script and replay it without Hurl. You can check the source code here [1]