npm AI-agent policy reports, with evidence.

The source establishes a complete automatic lifecycle path from package installation to a global foreign AI-agent CLI installation. Under the install-control-surface policy, that is block...

The postinstall hook unconditionally plants framework files in .claude and .agents and registers Copilot command hooks, which is unconsented install-time mutation of foreign and broad AI-...

Unconsented postinstall mutation of the OpenClaw skills directory is a foreign AI-agent control-surface write. The skill content is product documentation, but that does not remove the aut...

Unconsented postinstall mutation of the OpenClaw skills directory is a foreign agent control-surface write, so the package is malicious install behavior. The CLI's later user-configured A...

Postinstall unconditionally launches a downloaded binary that installs hooks into existing Claude Code and Codex directories, which is an unconsented mutation of foreign agent control sur...

The postinstall hook unconditionally mutates user-level Claude and Codex MCP configuration, which is an unconsented install-time write to foreign agent control surfaces. The server is loc...

The npm postinstall hook unconditionally mutates Claude Code and Codex configuration to register this package's MCP server. That is unconsented install-time mutation of foreign AI-agent c...

The automatic postinstall chain writes package content into a broad, foreign AI-agent configuration surface. Under the install-control-surface policy, this is blockable lifecycle abuse.

The install hook unconditionally writes a foreign, user-scoped Claude MCP registration and skill files, and pins that registration to a floating amicus@latest command. That is unconsented...

The package performs an unconsented post-install mutation of a foreign, user-wide AI-agent control surface. This meets the install-control-surface blocking policy.

The install hook unconditionally mutates Claude Code's user-level skills directory, a foreign agent control surface, unless an opt-out variable is already set. The copied content is this...

The postinstall hook unconsentedly mutates the user-wide OpenCode instruction config and injects binding agent directives. An opt-out environment variable does not make that install-time...

The postinstall hook unconsented rewrites the user-wide Claude settings file so later sessions export prompts, tool details, and account identifiers to a package-controlled collector. Tha...

The automatic lifecycle hook performs broad, potentially destructive AI-agent configuration writes without an explicit user command or consent gate. This meets the install-control-surface...

The package performs an unconsented post-install mutation of a shared AI-agent control surface. This meets the install-control-surface blocking rule.

The postinstall hook unconditionally mutates the user-global Claude Code settings file and installs a command Claude executes for every session. That is an unconsented install-time change...

The npm postinstall hook unconditionally starts a global Claude config write when the install is global, outside CI, and not opted out. That write changes ~/.claude settings and enables a...

The postinstall path automatically mutates OpenCode, Grok, Hermes, OpenClaw, and Cursor control files and reuses a local Cursor daemon token. That is concrete unconsented install-time hij...

Unconsented postinstall mutation of the global Claude Code hook surface is a foreign agent control-surface write, not an explicit user setup command. Empty matchers make the injected comm...

Postinstall on a global install unconditionally launches plugin install, and that command defaults to mutating Claude, Codex, and Cursor user configuration together. That is an unconsente...

The automatic lifecycle prompt is directed at an AI and chains to broad local agent configuration writes. This is an unconsented install-time AI-agent control-surface modification path.