LPM assessment of common-context-mcp install-time agent registration

Evidence record

Reports changes to multiple agent configurations during postinstall; does not establish external exfiltration.

Read the original source ↗

Claim-level citations (3)

• supportscommon-context-mcp automatically registered persistent shared memory across coding agents: The reviewed common-context-mcp 1.0.0 package declares npm postinstall as node scripts/postinstall.js and LPM reports that it registers a persistent MCP server across agent configurations.

  Source and flagged code: package.json scripts.postinstall and scripts/postinstall.js

• supportscommon-context-mcp automatically registered persistent shared memory across coding agents: The report describes an npm postinstall behavior writing persistent MCP registration into multiple coding-agent user configurations.

  Installation behavior and target configuration files

• supportscommon-context-mcp automatically registered persistent shared memory across coding agents: The review does not demonstrate an outbound transmission or confirm criminal misuse of shared context.

  Assessment and limitations