Postman silently auto-installs AI plugins and attempts to share all API data

Automated excerpt

Investigation found a user-wide Postman plugin, a startup instruction hook, a remote MCP connection, a Claude Code plugin, and a separately installed Postman CLI. Observe Postman MCP authentication failures and API tasks loading Postman skills. Narrow startup skill instructions to explicit Postman requests rather than making Postman the default for general API engineering.

Selected automatically from source text; not independently written or fact-checked. Read the original for full context.