AI BriefingPostman to clarify AI plugin opt-in after reports of unconfirmed installs in Claude Code and Codex
·2026.11.04 22:25
Key point
Postman's head of product confirmed the company is reviewing hook approval and session-start behavior following reports that the desktop app installed plugins without user prompts.
Details
- Postman's head of product stated the company will make the AI-plugin opt-in clearer, specifically for existing users, and is reviewing hook approval and session-start behavior.
- A GitHub issue reported that opening Postman's desktop app installed plugins into Claude Code and Codex without a prompt, citing the app's logs.
- A second user reported installation on a newer build but found no hook trust entry in their Codex config, meaning that specific part of the original report was not reproduced.
- The reports are from individual machines and do not constitute evidence that every installation behaves this way or that data was stolen.
- Changes to an agent's plugins and startup hooks can alter the instructions the agent receives.
This summary was generated automatically by AI. Check the original for the author's claims and context. Copyright belongs to the original author.
Our guide explains how the AI works. Report summary errors, attribution issues, or removal requests via Contact.
Related
OpenQodex: Open-Source AI Code Review Tool Verifies Agent Changes with 98% Issue Recall