diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 1409a50..7a9bf6c 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -46,7 +46,7 @@ jobs:
           cache: npm
 
       - name: Install Node dependencies
-        run: npm ci
+        run: npm ci --ignore-scripts
 
       - name: Test browser evidence boundary
         run: npm run test:visual-capture
diff --git a/.github/workflows/rust-docs-visual.yml b/.github/workflows/rust-docs-visual.yml
index bdde7fd..fc317c0 100644
--- a/.github/workflows/rust-docs-visual.yml
+++ b/.github/workflows/rust-docs-visual.yml
@@ -82,7 +82,7 @@ jobs:
 
       - name: Install pinned visual capture runtime
         if: steps.classify.outputs.required == 'true'
-        run: npm ci --prefix visual-controller
+        run: npm ci --ignore-scripts --prefix visual-controller
 
       - name: Build candidate API reference
         if: steps.classify.outputs.required == 'true'