Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.
Static reason
No blocking static signals were detected.
Trigger
User runs `npm run install:user` or invokes the package's explicit install command.
Impact
Future Codex and Claude sessions can be influenced by project `.noosphere` context; captured content is persisted locally and may be relayed to an approved endpoint.
Mechanism
Global AI-agent hook/config mutation plus prompt and session-memory collection.
Rationale
The package is not malicious by static source evidence because it has no automatic lifecycle hook and constrains relayer authority. Its explicit installer nevertheless creates persistent global agent hooks that collect and inject agent context, which warrants a warning under the firewall policy.
Evidence
package.jsonlifecycle/install.jshooks/install-hook.jshooks/capture-prompt.jshooks/post-session.jscontinuity/index.jscontinuity/relayer-authority.js~/.codex/AGENTS.md~/.codex/AGENTS.override.md~/.codex/hooks.json~/.claude/settings.json~/.claude/hooks/noosphere/capture-prompt.js~/.claude/hooks/noosphere/post-session.js