Loading npm security reports…
Agents that read the room. Ambient context, cadence dials, and finish-line guardrails for Claude Code and any agent harness. Richest signals on macOS; universal signals (time, git, activity, intent, self-report) everywhere.
LPM treats this as warn-only first-party agent extension lifecycle risk. A first-party Claude plugin lifecycle hook injects locally derived user-state context into agent sessions. No unconsented npm install-time mutation or malicious exfiltration was found.
hooks/hooks.json runs package commands on Claude session, prompt, post-tool, and stop events.
hooks/hooks.jsonView on unpkgdist/hook.js reads hook prompt/cwd and emits additionalContext to steer agent responses.
dist/hook.jsView on unpkgdist/posttool.js reads Bash commands/tool output and emits state-update context.
dist/posttool.jsView on unpkgdist/providers/environment.js reads local ambient signals and fetches opt-in weather.
dist/providers/environment.jsView on unpkghooks/hooks.json runs package commands on Claude session, prompt, post-tool, and stop events.
hooks/hooks.jsonView on unpkgdist/hook.js reads hook prompt/cwd and emits additionalContext to steer agent responses.
dist/hook.jsView on unpkgdist/posttool.js reads Bash commands/tool output and emits state-update context.
dist/posttool.jsView on unpkgdist/providers/environment.js reads local ambient signals and fetches opt-in weather.
dist/providers/environment.jsView on unpkg