I've found that when you export a catalog from patch manager it includes a file called supplementary.xml for each package. This file contains the names of your patch manager and wsus servers. I would like to have the option to export without supplementary data or at least have the data anonymized. I have tested importing catalogs with this data completely removed and it does not seem to affect the import process. The fact that server names are included forces me to modify any catalogs to remove it before submitting to the content exchange. Since there is more work required, I usually end up just not submitting packages I've created. There is also no way to know this data is included without extracting the cabs and looking for yourself which leads to users uploading catalogs containing sensitive data.
