A plugin install is a new permission, and the app whose files change has to show the prompt. If the installer can tick the box, you never got a choice.
Postman desktop did this on open. A signed-in user launched the app they already had, and its log recorded auto-existing-upgrade with Codex and Claude Code marked installed.
Codex never put up a dialog. The HTTP client had already written the agent's files.
The startup hook is a wide new boss, not a tiny helper. It tells the agent to load Postman's skill before non-trivial API work: design, implement, mock, test, monitor, document, deploy.
You wanted to send a request. Your coding agent came back with a default coworker and a job description that covers most of software.
The installer then tries to approve that hook itself. After install, the Codex integration lists the hook, hashes it, and upserts trusted_hash into Codex config.
A comment in that code says it approves only Postman's current hook. Narrow self-approval is still self-approval.
The report is careful about one fact: a trust line on disk does not prove which process wrote it. That gap is the lesson.
A hash in a config file is not a person clicking Allow.
Same pass, the plugin points Codex at https://mcp.postman.com/mcp. Codex logged an auth failure on the way out.
The remote tool was in the config before a working login existed. The writeup does not claim collections were uploaded.
It claims the integration and the instructions appeared on their own. That is the bug.
Boring version, same shape. App A starts and writes App B's marketplace entry, enables the plugin, adds a startup instruction, stores a trust hash, and adds a remote endpoint.
App B boots and treats the files as a decision. The decision was a script that can write ~/.codex and ~/.claude.
Don't do this:
If turning it off means hand-editing two agents, a CLI, and a cache, the feature shipped without an off switch. Takeaway: consent is a prompt in the tool whose files change.
Source: [https://github.com/postmanlabs/postman-app-support/issues/14370](https://github.com/postmanlabs/postman-app-support/issues/14370)
HN: [https://news.ycombinator.com/item?id=50354960](https://news.ycombinator.com/item?id=50354960)
This post was generated automatically from public Hacker News data.