Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.
Static reason
No blocking static signals were detected.
Trigger
User runs `soul install codex` or another supported adapter install command.
Impact
Configured agents may invoke local `soul` memory commands and persist bounded local memory data.
Mechanism
User-invoked AI-agent configuration and hook registration.
Rationale
Not malicious: no lifecycle execution, network exfiltration, or concealed payload was found. Warn because explicit installation mutates AI-agent hooks and configuration, a privileged capability that users should consciously approve.
Evidence
package.jsondist/cli/bin.jsdist/cli/app.jsdist/adapters/codex/index.jsdist/adapters/claude/index.jsdist/adapters/pi/index.jsdist/core/memory-paths.jsdist/core/atomic-file.js~/.codex/config.toml~/.codex/hooks.json~/.codex/AGENTS.md~/.agents/memory