@wowok/skills@3.2.7

High-risk behavior combination matched malicious policy.

npm postinstall via scripts/install.js calling runLifecycle.

A normal install mutates foreign agent skill and MCP control files and can replace or restart a globally installed agent server without a separate user command.

Default target list covers many third-party clients. Skill markdown is copied into user skill directories, npm install -g fetches @wowok/agent-mcp, and MCP JSON or TOML configs are updated to launch it. A changed install then signals pkill or PowerShell Stop-Process.

Installing @wowok/skills runs postinstall, which loads the shared installer and treats every listed AI client as a target. It creates user skill directories and writes the package skill files into them, including Claude, Cursor, Copilot, and Grok paths. Unless an environment flag skips MCP setup, it also queries npm, globally installs @wowok/agent-mcp, and appends a launcher entry to client config files such as the Claude user config. If that server changes, the hook force-stops matching Node processes so the clients start the new binary.

The postinstall hook writes this package into many third-party AI skill directories and registers a second global package in their MCP configs without a separate user command. That is unconsented mutation of a broad foreign agent control surface, so the release should be blocked.