Loading npm security reports…
The open-source coding agent that lives in your terminal.
LPM treats this as warn-only first-party agent extension lifecycle risk. On explicit CLI launch, the coding agent bootstraps its own skill directory and can invoke shell, workspace-editing, and web-fetch tools during model-driven sessions. No install-time or foreign AI-agent control-surface mutation is present.
src/skills.ts writes bundled SKILL.md files under ~/.interference/skills.
src/skills.tsView on unpkgsrc/tools/bash.ts runs model-requested shell commands; default policy allows unmatched commands.
src/tools/bash.tsView on unpkgsrc/tools/webfetch.ts permits model-requested HTTP(S) fetches.
src/tools/webfetch.tsView on unpkgsrc/skills.ts writes bundled SKILL.md files under ~/.interference/skills.
src/skills.tsView on unpkgsrc/tools/bash.ts runs model-requested shell commands; default policy allows unmatched commands.
src/tools/bash.tsView on unpkgsrc/tools/webfetch.ts permits model-requested HTTP(S) fetches.
src/tools/webfetch.tsView on unpkg