greprag@5.60.6

High-risk behavior combination matched malicious policy.

npm install when ~/.claude or ~/.codex exists

Package-supplied instructions become available to Claude Code and Codex without explicit setup consent.

automatic global AI-agent skill deployment

Installing the package invokes postinstall automatically. When Claude Code or Codex directories exist, the script recursively copies the bundled greprag skill into each platform's global skill registry, where its instructions can influence later agent sessions. This is an unconsented install-time mutation of foreign AI-agent control surfaces.

Direct inspection confirms the postinstall drop into ~/.claude and ~/.codex, not merely scanner inference. This meets the firewall block boundary for unconsented postinstall mutation of broad foreign AI-agent control surfaces.