Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.
Static reason
No blocking static signals were detected.
Trigger
User runs `seastudio plugin install` or `seastudio skill install`.
Impact
A user-selected extension may be installed into SeaStudio Desktop; plugin frontend builds execute only when explicitly requested.
Mechanism
user-invoked local agent-extension installation via IPC
Rationale
This is not malicious, but explicit CLI-driven agent extension installation is a meaningful capability requiring a warning under the stated policy. No concrete unconsented or install-time malicious chain was found.
Evidence
package.jsonbin/seastudio.mjsdist/desktop-cli/cli.jsdist/chunk-KXXEASW3.jsdist/chunk-CASB426N.js