registry / @anthonyhaussman/opencode-agy-auth / 1.4.10
@anthonyhaussman/opencode-agy-auth@1.4.10
[](https://www.npmjs.com/package/@anthonyhaussman/opencode-agy-auth) [](https://www.npmjs.com/
AI Security Review
scanned 7d ago · by lpm-firewall-aiThe package’s OAuth credentials are used with Google endpoints for its stated Antigravity provider purpose. Its periodic generated telemetry is disclosed as background traffic simulation and is triggered by provider activity; no unrelated credential exfiltration or malicious action was identified.
Static reason
One or more suspicious static signals were detected.
Trigger
The plugin runs when OpenCode loads it; OAuth and provider network activity occurs during authentication or matching provider requests. Background telemetry follows successful requests.
Impact
No credential transfer to a foreign host or unrelated action was identified. The plugin does send generated telemetry to Google Code Assist as part of its disclosed traffic simulation.
Mechanism
Uses Google OAuth and Code Assist endpoints with the provider’s access token. It also fetches model pricing from models.dev and writes local auth and cache data.
AI rationale
The package’s OAuth credentials are used with Google endpoints for its stated Antigravity provider purpose. Its periodic generated telemetry is disclosed as background traffic simulation and is triggered by provider activity; no unrelated credential exfiltration or malicious action was identified.
Evidence
~/.local/share/opencode/auth.jsonOS temporary directory/agy-pricing-cache.json-<uid>
Network endpoints6
accounts.google.comoauth2.googleapis.comwww.googleapis.comdaily-cloudcode-pa.googleapis.com (overridable with OPENCODE_AGY_ENDPOINT)generativelanguage.googleapis.commodels.dev
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exports an OpenCode plugin from dist/index.js and declares no install, preinstall, or postinstall lifecycle hook.
- The README describes Antigravity OAuth, quota and model features, and discloses background traffic simulation.
- OAuth uses PKCE and Google authorization, token, and user-info endpoints.
- The plugin’s fetch hook targets the configured Antigravity provider; background traffic is triggered after a successful provider request and is rate-limited.
- The background traffic uses Google Code Assist endpoints and sends generated telemetry; this matches the package’s disclosed heartbeat feature.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
4 flaggeddist/index.jsView file
133// src/plugin/oauth-authorize.ts
L134: import { spawn } from "child_process";
L135:
High
118var AGY_CODE_ASSIST_ENDPOINT = process.env.OPENCODE_AGY_ENDPOINT || "https://daily-cloudcode-pa.googleapis.com";
L119: var AGY_GENERATIVE_LANGUAGE_ENDPOINT = "https://generativelanguage.googleapis.com/v1beta";
L120:
...
L122: function agyFetch(input, init) {
L123: const proxy = process.env.OPENCODE_AGY_AUTH_PROXY;
L124: if (!proxy) {
...
L133: // src/plugin/oauth-authorize.ts
L134: import { spawn } from "child_process";
L135:
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.jsView on unpkg · L11829}
L30: const data = readFileSync(cachePath, "utf-8");
L31: return JSON.parse(data);
...
L133: // src/plugin/oauth-authorize.ts
L134: import { spawn } from "child_process";
L135:
...
L1296: }
L1297: const baseUrl = `${AGY_CODE_ASSIST_ENDPOINT}/v1internal`;
L1298: const onboardUrl = `${baseUrl}:onboardUser`;
Findings
3 High3 Medium6 Low
HighChild Processdist/index.js
HighSame File Env Network Executiondist/index.js
HighRemote Agent Bridgedist/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @anthonyhaussman/opencode-agy-auth@1.4.10.
See all versions of @anthonyhaussman/opencode-agy-auth for other recorded verdicts.
- Review the evidence and your use of @anthonyhaussman/opencode-agy-auth@1.4.10 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.