Ran an install command (e.g., npm install, pip install, docker pull, brew install, helm install, kubectl apply)

They’re installing your SDK, CLI, or container—likely to explore or test it locally.

This is often the first moment of product contact. On its own, it’s a lightweight signal, but when repeated across a team or followed by setup actions, it helps surface accounts moving from awareness to evaluation.