audit-tools@0.32.9

One or more suspicious static signals were detected.

npm install (postinstall)

Persists package-controlled prompts and permissions across Codex, Claude, OpenCode, and Antigravity.

unconsented global AI-agent extension and permission deployment

Installing the package automatically launches deployers that write package-controlled skills, prompts, commands, plugins, and merged OpenCode permissions into global AI-agent configuration locations. The audit agent configuration includes wildcard external-directory and bash allowances, establishing a broad persistent agent control surface without an explicit setup command.

This is concrete unconsented postinstall mutation of foreign and broad AI-agent control surfaces. The absence of lifecycle exfiltration does not neutralize the persistence and permission injection.