Loading npm security reports…
剧本阶段统一 CLI：素材转 Script v4，并兼容 Script v3 的本地写作、精修、校验和发布。
LPM treats this as warn-only first-party agent extension lifecycle risk. npm postinstall mutates three AI-agent skill roots without an explicit setup command. It replaces each scriptctl skill directory with bundled agent instructions.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgPackage source references dynamic require/import behavior.
dist/infra/llm/gemini-video-model.jsView on unpkg · L167Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.
scripts/install-skill.mjsView on unpkg · L3Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L24Package source references dynamic require/import behavior.
dist/infra/llm/gemini-video-model.jsView on unpkg · L167Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.
scripts/install-skill.mjsView on unpkg · L3