SG-051: Config-Path Supply Chain
Severity: HIGH
package.json / setup.py / GHA workflow writing into AI-assistant config paths
Fires when
- The file is package or CI content - package.json scripts, pyproject/[project], setup.py install, or a GitHub Actions workflow.
- A write verb (fs.writeFile, echo >>, tee, .write_text, or an install script) sits next to an AI-assistant config-path token (~/.claude/, .cursorrules, .continue/, AGENTS.md, CLAUDE.md).
- Does not fire on the instruction files themselves (skill / CLAUDE.md docs that merely mention these paths).
Remediation
Remove any install hook (`preinstall`, `install`, `postinstall`, `prepare`) that writes into `~/.claude/`, `.claude/skills/`, `.cursorrules`, `AGENTS.md`, or any other AI-assistant config path. If the package legitimately needs to set up agent configs, do it at runtime via a CLI the user opts into, not at install time.