Loading npm security reports…
Download Instagram photos, carousels, videos, and Reels from a link.
Installing the npm package automatically alters AI coding-agent skill directories if their parent folders exist. This occurs without an explicit setup command.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgThe npm postinstall hook installs the bundled Python project and automatically invokes its skill installer.
package.jsonView on unpkg · L9Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage ships non-JavaScript build or shell helper files.
juanig/update.pyView on unpkgThe npm postinstall hook installs the bundled Python project and automatically invokes its skill installer.
npm/postinstall.jsView on unpkg · L4The installer targets skill locations for several third-party AI coding tools in both the user home directory and the current project.
juanig/setup_local.pyView on unpkg · L15The skill installer creates directories and writes package-provided instructions into those agent control locations.
juanig/setup_local.pyView on unpkg · L36This report applies to juanig@1.1.3.
See version security history for other recorded verdicts.
Evidence last updated: .
Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L10Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L10The npm postinstall hook installs the bundled Python project and automatically invokes its skill installer.
package.jsonView on unpkg · L9Package ships non-JavaScript build or shell helper files.
juanig/update.pyView on unpkgThe npm postinstall hook installs the bundled Python project and automatically invokes its skill installer.
npm/postinstall.jsView on unpkg · L4The installer targets skill locations for several third-party AI coding tools in both the user home directory and the current project.
juanig/setup_local.pyView on unpkg · L15The skill installer creates directories and writes package-provided instructions into those agent control locations.
juanig/setup_local.pyView on unpkg · L36