@zhushanwen/coding-workflow@2.1.0

One or more suspicious static signals were detected.

npm install or npm install -g

Package prompts become discoverable by multiple AI-agent harnesses.

Postinstall symlink injection into AI-agent skill and agent directories

Installing the package invokes its postinstall hook. That hook creates symlinks from package-controlled skill and agent content into generic, Claude, and Pi agent discovery directories, causing those harnesses to load package content outside the project scope. The lifecycle script is cross-platform-control-surface mutation rather than an explicit user-invoked setup step.

The package performs unconsented postinstall mutation of broad, foreign AI-agent control surfaces. This meets the blocking lifecycle-control-surface policy even though no exfiltration endpoint was found.