Loading npm security reports…
Stable terminal UI for Codex and Claude Agent SDK
LPM flags this version as an AI-agent control-surface risk. Installing the package automatically changes the user's Codex and Claude agent skill directories. It also installs Python dependencies into the user account.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgThe automatic postinstall hook runs two package scripts on installation.
package.jsonView on unpkg · L42Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgSource creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.
install-skills.mjsView on unpkg · L1Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
skills/insane-search/tests/live_benchmark/bench.pyView on unpkgPackage ships non-JavaScript build or shell helper files.
skills/insane-search/tests/live_benchmark/bench.pyView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkg · L43Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L43The automatic postinstall hook runs two package scripts on installation.
package.jsonView on unpkg · L42Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.
skills/insane-search/tests/live_benchmark/bench.pyView on unpkgPackage ships non-JavaScript build or shell helper files.
skills/insane-search/tests/live_benchmark/bench.pyView on unpkgSource creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.
install-skills.mjsView on unpkg · L1