npm AI-agent policy reports, with evidence.

The automatic lifecycle hook mutates a broad, foreign AI-agent control surface and installs instructions designed to suppress confirmation. This is concrete install-time control-surface a...

The package has a concrete automatic postinstall path that configures third-party AI coding clients through an executable it fetches and runs. The opt-out variables do not make the defaul...

The package performs unconsented postinstall mutation of foreign, broad AI-agent control surfaces, meeting the blocking lifecycle policy.

This is an unconsented postinstall mutation of foreign AI-agent control surfaces, including destructive replacement of skill directories and automatic Codex plugin enablement. It meets th...

The bundled runtime contains an active, default-enabled AI control prompt that compels package-selected tool use and suppresses transparent assistant behavior. Although the outer client r...

The package has a concrete automatic lifecycle path that writes behavior-bearing files into foreign, broad AI-agent control surfaces. Although no network or credential sink appears in the...

The automatic lifecycle hook changes a foreign AI-agent control surface and persistent user environment. This is concrete install-hook abuse, not an explicit user-invoked setup action.

The automatic postinstall hook writes package-controlled agent skills into the consumer project's .agents tree. This meets the install-control-surface blocking policy regardless of the op...

The automatic postinstall hook mutates two unrelated, user-level AI-agent control surfaces. This meets the blocking policy for unconsented lifecycle configuration changes.

This is unconsented post-install mutation of third-party AI-agent control surfaces through an opaque native binary. The automatic, quiet execution meets the install-control-surface blocki...

This is a concrete unconsented postinstall mutation of broad, foreign AI-agent control surfaces. It meets the install-control-surface blocking policy even though no secret exfiltration wa...

The package implements an automatically activated remote command channel that can install arbitrary remotely supplied skill archives into agent directories. This is a concrete AI-agent co...

The automatic lifecycle hook persistently changes two external AI-agent configurations to launch package code. This meets the blocking policy for unconsented postinstall control-surface m...

The automatic lifecycle path reaches broad persistent AI-agent and Git configuration changes in the consumer repository. This meets the install-control-surface blocking policy.

The package has a concrete automatic lifecycle chain that silently changes foreign AI-agent configuration and tool controls. This meets the install-control-surface blocking policy.

The automatic postinstall chain mutates another vendor's Codex executable paths with opaque native binaries. This meets the install-control-surface blocking boundary despite its backup an...

The package has a concrete, automatic postinstall chain that installs a foreign agent CLI and modifies persistent shell configuration. That exceeds package-local setup and meets the insta...

The automatic postinstall deploys an opaque bundled binary and injects it into Pi's shared MCP configuration. This meets the policy threshold for unconsented install-time mutation of a fo...

The automatic postinstall chain persistently modifies ~/.claude and registers package commands as Claude Code hooks without an install-time consent gate. This meets the install-control-su...

This is a concrete postinstall control-surface mutation chain, not merely an explicit setup command. The automatic writes to Claude Code settings and package-controlled skill meet the ins...

The automatic lifecycle hook performs broad global AI-agent configuration changes rather than limiting setup to an explicit command or package-owned location. This meets the install-contr...