LPM treats this as warn-only first-party agent extension lifecycle risk. Explicit user commands can register this package as an MCP server and append marked rules to supported AI-agent configuration files. No install-time activation or confirmed data exfiltration was found.
Static reason
No blocking static signals were detected.
Trigger
User runs `projectmind setup`, `setup --global`, or `install-hook`.
Impact
Future agent sessions may invoke the package MCP server; post-commit updates project map metadata.
Mechanism
User-invoked AI-agent configuration and project hook setup.
Rationale
No concrete malicious chain, install hook, exfiltration, or hidden execution was found. Its explicit project/global AI-agent setup is a persistent extension capability that warrants a warning under policy.
Evidence
package.jsonsrc/cli/index.jssrc/setup/index.jssrc/hooks/install.jssrc/hooks/postcommit.jssrc/core/index.js.mcp.json.cursor/mcp.json.windsurf/mcp.json.gemini/settings.jsonCLAUDE.md.cursorrules.windsurfrulesGEMINI.mdAGENTS.md.github/copilot-instructions.md.git/hooks/post-commit~/.cursor/mcp.json~/.codeium/windsurf/mcp_config.json