audit-tools@0.33.0

One or more suspicious static signals were detected.

npm install of audit-tools

Persists package-controlled prompts and command permissions into user-level Codex, Claude, OpenCode, and Gemini/Antigravity environments.

automatic global AI-agent asset deployment and configuration merge

Installing the package automatically launches both deployers. They write package-supplied slash-command prompts and skills into global Codex and Claude locations, install Gemini/Antigravity plugins, and merge commands plus permissions into the user’s global OpenCode configuration. The injected skills direct hosts to run package commands and autonomously dispatch subagents when invoked. This is an unconsented install-time mutation of broad, foreign AI-agent control surfaces.

The automatic postinstall crosses multiple unrelated AI-host configuration domains and persists package-controlled agent behavior. This meets the install-control-surface block boundary even though the inspected lifecycle code does not itself exfiltrate data.