npm AI-agent policy reports, with evidence.

Postinstall fetches a native binary and, when Claude Code or Codex config directories already exist, runs install-hooks --all without an explicit user command. That is unconsented install...

The postinstall hook mutates a foreign OpenCode control surface in the consumer project and then applies a remotely fetched bundle into the same agent and command paths. That matches unco...

npm postinstall executes an opaque bundled binary that writes Claude Code hooks and commands into the user's global ~/.claude surface without a separate setup command. That is unconsented...

The postinstall hook writes Claude Code skills into the consumer project's .claude/skills directory without a user command, which is unconsented mutation of a foreign AI-agent control sur...

postinstall mutates a foreign Claude Code skill directory in the consuming project without a user command, which is unconsented agent-control-surface hijack. Skill text looks product-rela...

Postinstall automatically runs a compiled binary that writes this third-party package's hooks and prompts into Claude Code's user directories, a foreign machine-wide agent control surface...

Source shows an unconsented npm postinstall write into Claude Code's project hooks.json with a wildcard PreToolUse command. That is a foreign, broad agent control-surface mutation and mee...

postinstall runs install/install.mjs --yes and writes OpenCode plugins, agents, skills, and config, plus global npm installs, without a user setup command. That is unconsented mutation of...

The postinstall hook unconsented-writes Copilot, Claude Code, and Cursor control files in the consumer project and also weakens pnpm script gating via .npmrc. That is foreign and broad AI...

postinstall runs install.js, which writes bundled skills into many third-party agent skill directories without consent. That is unconsented install-time mutation of a foreign, broad AI-ag...

The postinstall hook performs unconsented writes of bundled agent skills into the shared ~/.agents/skills store and into detected third-party agent skill directories, which is foreign and...

The automatic postinstall hook mutates a consumer-owned Claude Code configuration and removes existing files. This is concrete unconsented install-hook abuse despite the absence of observ...

The automatic lifecycle hook mutates the consumer project's Claude Code configuration area, including deletion and installation of skill instructions. This meets the install-control-surfa...

This is unconsented postinstall mutation of a broad AI-agent control surface, coupled with credentialed external data transmission. The documented feature purpose does not remove the auto...

The postinstall hook automatically writes branded skills into many third-party agent skill directories. That is unconsented install-time mutation of a foreign, broad AI-agent control surf...

The install hook writes into the consumer .claude/skills directory, which is an unconsented foreign AI-agent control surface. That matches publish-block hijack even though the skill text...

The postinstall hook writes Claude Code skills into the installing project's .claude/skills directory without a user command. That is unconsented mutation of a foreign AI-agent control su...

Default npm postinstall copies this package's skill pack into ~/.clawdbot/skills and force-links it into ~/.claude, ~/.codex, and ~/.agents without an explicit user command. That is uncon...

The published postinstall hook writes Claude Code skills into the consuming project's .claude/skills folder, which is an unconsented foreign agent control-surface change. Product-looking...

The postinstall hook writes Claude Code skills into the consumer project's .claude/skills directory without a user command, which is an unconsented install-time mutation of a foreign agen...

Automatic postinstall copies FocalAPI skills into every detected third-party agent skills directory without an explicit connect command. That is unconsented mutation of a foreign and broa...