@rosetears/aili-pi@0.1.9

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

npm postinstall when installed under either recognized Pi npm root

Existing agent instructions/capabilities can be replaced without user approval.

stages and replaces matching global AI-agent skills

The automatic postinstall invokes sync-global-skills.mjs. When the package resides in a Pi-managed npm directory, it enumerates packaged skills and replaces every existing same-name real directory in ~/.agents/skills via staged copy, rename, and deletion. This mutates a broad global AI-agent control surface without an explicit user command; checking the package install location does not prove those global targets belong to this package.

This is a concrete unconsented postinstall mutation of a foreign/broad AI-agent control surface. No separate exfiltration chain is needed for the blocking verdict.