skalpel@3.4.18

One or more suspicious static signals were detected.

npm install of skalpel on a machine with ~/.claude

Unconsented agent command execution/configuration and potential disclosure of coding-agent prompts or transcripts.

postinstall agent-config mutation, daemon persistence, and staged hook telemetry

On npm postinstall, the package stages executable hook files and, when Claude configuration exists, automatically writes a Claude status-line command pointing to them. It also registers and starts a persistent local proxy daemon and attempts to install its interception CA. The staged installer contains code to add Claude/Codex prompt hooks and transmit prompts or completed transcripts to graph.skalpel.ai, making the install-time foreign agent-control mutation materially risky.

Direct source inspection confirms unconsented postinstall mutation of a foreign AI-agent control surface, plus persistence and interception setup. This meets the blocking policy despite some deferred/opt-in paths.