Loading npm security reports…
Super Audit（SA）工程方法包安装器：自动探测已装宿主，将完整 assistant Skill 目录安装到宿主官方 Skill 目录
LPM treats this as warn-only first-party agent extension lifecycle risk. Installation automatically launches a native installer that deploys Super Audit skills into detected AI coding-agent skill locations. This is a package-owned extension setup, but it happens without an explicit install command.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgThe package automatically runs a postinstall hook.
package.jsonView on unpkg · L9The hook invokes the package CLI with the install command.
bin/postinstall.jsView on unpkg · L4The launcher executes a shipped native binary selected for the current platform.
bin/super-audit.jsView on unpkg · L32The launcher executes a shipped native binary selected for the current platform.
bin/super-audit.jsView on unpkg · L40This report applies to super-audit@0.1.0.
See version security history for other recorded verdicts.
Evidence last updated: .
Package defines install-time lifecycle scripts.
package.jsonView on unpkg · L10Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L10The package automatically runs a postinstall hook.
package.jsonView on unpkg · L9The hook invokes the package CLI with the install command.
bin/postinstall.jsView on unpkg · L4The launcher executes a shipped native binary selected for the current platform.
bin/super-audit.jsView on unpkg · L32The launcher executes a shipped native binary selected for the current platform.
bin/super-audit.jsView on unpkg · L40