@bumpyclock/tasque@0.8.0

One or more suspicious static signals were detected.

npm install runs postinstall

May modify installed agent skill state during package installation and executes an uninspected platform binary at install time.

postinstall binary download plus automatic tsq skills refresh

On installation, npm runs scripts/postinstall.js. If the platform optional dependency is not resolved, it downloads tsq and tsq-tui tar entries from registry.npmjs.org, writes them under bin/, chmods them executable, then invokes the resolved/downloaded tsq binary with skills refresh --json while pointing TSQ_SKILLS_DIR at the bundled SKILLS directory. That lifecycle action can mutate AI-agent skill state without a separate user command.

The JS source does not show credential theft or arbitrary exfiltration, but it does perform unconsented install-time execution specifically aimed at refreshing agent skills. Under the firewall boundary, lifecycle mutation of an AI-agent control surface is blocking behavior even when the bundled skill text appears benign. Product guard normalized a concrete AI-agent control hijack publish_block to the blockable dangerous-capability shape.