npm AI-agent policy reports, with evidence.

The postinstall hook automatically runs the global installer, which writes to several user-level AI-agent configuration locations and enables Codex workspace network access. This is concr...

The npm postinstall hook unconditionally writes a package-owned MCP server entry to Claude and Codex user configuration. This meets the policy for blocking unconsented install-time mutati...

Source inspection confirms an automatic npm postinstall writes package-controlled scripts into an existing consumer Claude Code control surface, including hooks and session startup. Under...

The manifest activates the bootstrap during npm postinstall, and source shows it copying package-controlled hook scripts and helpers into an existing consumer .claude directory. That unco...

The automatic postinstall hook writes user-level Claude telemetry settings that enable prompt and assistant-response logging to the package’s configured collector. This is unconsented mut...

The source confirms that npm postinstall automatically writes bundled skills across global AI-agent skill directories. This meets the policy for blocking unconsented mutation of a broad a...

The package automatically changes shell profiles during global installation and redirects Anthropic clients through its tenant endpoint. This supports blocking for unconsented postinstall...

The package's install lifecycle automatically mutates user-level AI assistant skill and MCP configuration. This meets the policy for blocking unconsented lifecycle changes to an AI-agent...

The install hook silently modifies Claude Code configuration and capabilities when Claude is detected, which is an unconsented install-time change to an AI-agent control surface. This sup...

The install lifecycle silently modifies global and project AI-agent control surfaces across multiple tools. This meets the blocking policy for unconsented install-time mutation of broad a...

Source inspection confirms unconsented postinstall mutation across multiple AI agent configurations, global instruction files, and shell startup files. This meets the blocking policy for...

The postinstall hook performs unconsented writes to multiple AI-agent configuration surfaces in both the project and user home. Under the install control-surface policy, this warrants blo...

The package performs unconsented postinstall writes to broad AI-agent configuration locations, establishing an active control-surface mutation attack surface. The source supports blocking...

The manifest's postinstall hook reaches code that automatically writes to multiple AI-agent configuration locations without a consent prompt. This meets the block criterion for unconsente...

The package automatically mutates global AI-agent instruction directories during postinstall, creating an unconsented agent control surface. This matches the install-hook blocking policy...

The postinstall hook reaches code that mutates broad AI-agent configuration locations without a consent prompt. This meets the blocking policy for unconsented installation-time control-su...

The automatic postinstall hook mutates foreign AI-agent control surfaces without user consent. This meets the install-time control-hijack blocking criterion.

The package's postinstall hook reaches code that silently writes instructions and configuration across multiple AI-agent control surfaces. This meets the blocking policy for unconsented i...

The automatic postinstall path writes behavior-bearing configuration into AI-agent control locations without consent. This is concrete install-time control-surface mutation and warrants b...

The unconsented global npm postinstall mutates multiple AI agent control surfaces by installing a skill and registering an MCP server. This meets the policy for blocking an install-time a...

The automatic postinstall hook makes unconsented changes to two foreign AI-agent control surfaces by registering this package’s MCP server. This meets the blocking policy for install-time...