You opened Postman. Your agent got new orders.

A GitHub report on Postman's own tracker shows the desktop app auto-installing plugins into Claude Code and Codex, with a startup hook that makes Postman the default for API work. The report says it "does not claim to establish data exfiltration": the problem it documents is consent.

Source: "[SEVERE] Desktop auto-installs Codex/Claude plugins; installer attempts to trust its own startup hook", GitHub, Oct 25, 2026 (indicava) https://github.com/postmanlabs/postman-app-support/issues/14370

The orders card, the trust prompt, the pointer and the permission slip are dramatizations; every quote on screen is from the sources. One report and one matching comment, not yet reproduced on a clean Mac; no reply from Postman on the thread as of Nov 3, 2026.

Have you read what your agent reads?