registry / @anthonyhaussman/opencode-agy-auth / 1.4.8
@anthonyhaussman/opencode-agy-auth@1.4.8
[](https://www.npmjs.com/package/@anthonyhaussman/opencode-agy-auth) [](https://www.npmjs.com/
AI Security Review
scanned 8d ago · by lpm-firewall-aiSource inspection found no lifecycle install hook or concrete attack behavior. The flagged network, environment, and subprocess operations support the plugin's authentication, provider, and storage behavior.
Static reason
One or more suspicious static signals were detected.
Trigger
OpenCode loads the plugin and invokes its authentication or provider functions.
Impact
The inspected behavior supports authentication and provider storage; no unrelated credential recipient, unrequested account action, or harmful install behavior was established.
Mechanism
The inspected authentication flow uses Google OAuth and PKCE, refreshes tokens through Google's OAuth endpoint, and can open the authorization URL in a browser. The AWS helper is used by the dependency's DynamoDB storage path.
AI rationale
Source inspection found no lifecycle install hook or concrete attack behavior. The flagged network, environment, and subprocess operations support the plugin's authentication, provider, and storage behavior.
Evidence
dist/index.js
Network endpoints3
accounts.google.comoauth2.googleapis.comdynamodb.${c.region}.amazonaws.com
Decision evidence
public snapshotAI called this Clean at 86.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package exports its built plugin and lists development, packaging, and prepack scripts; no install lifecycle script is present.
- The authentication flow creates a PKCE challenge and directs authorization to Google; its browser-opening path receives the generated authorization URL.
- Refresh requests send the stored refresh token to Google's OAuth token endpoint.
- The inspected AWS helper obtains credentials from AWS environment variables or the container metadata URI; its DynamoDB caller uses the AWS client with a caller-configurable endpoint or the regional AWS endpoint.
- The inspected dependencies expose provider, authentication, and plugin modules through their package entrypoints.
- The OpenAuth dependency's inspected issuer source contains a token route that accepts form data.
Evidence against
- The bundle uses a subprocess to open the authorization URL and reads environment variables for configuration; these inspected uses align with browser-based authentication and provider setup.
- The package and dependencies use network requests, including Google OAuth and AWS DynamoDB requests; the inspected recipients and data flow align with those functions.
Source & flagged code
4 flaggeddist/index.jsView file
133// src/plugin/oauth-authorize.ts
L134: import { spawn } from "child_process";
L135:
High
118var AGY_CODE_ASSIST_ENDPOINT = process.env.OPENCODE_AGY_ENDPOINT || "https://daily-cloudcode-pa.googleapis.com";
L119: var AGY_GENERATIVE_LANGUAGE_ENDPOINT = "https://generativelanguage.googleapis.com/v1beta";
L120:
...
L122: function agyFetch(input, init) {
L123: const proxy = process.env.OPENCODE_AGY_AUTH_PROXY;
L124: if (!proxy) {
...
L133: // src/plugin/oauth-authorize.ts
L134: import { spawn } from "child_process";
L135:
High
Same File Env Network Execution
A single source file combines environment access, network access, and code or shell execution; review context before blocking.
dist/index.jsView on unpkg · L11829}
L30: const data = readFileSync(cachePath, "utf-8");
L31: return JSON.parse(data);
...
L133: // src/plugin/oauth-authorize.ts
L134: import { spawn } from "child_process";
L135:
...
L1296: }
L1297: const baseUrl = `${AGY_CODE_ASSIST_ENDPOINT}/v1internal`;
L1298: const onboardUrl = `${baseUrl}:onboardUser`;
Findings
3 High3 Medium6 Low
HighChild Processdist/index.js
HighSame File Env Network Executiondist/index.js
HighRemote Agent Bridgedist/index.js
MediumNetwork
MediumEnvironment Vars
MediumStructural Risk Force Deep Review
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
Affected versions and remediation
This report applies to @anthonyhaussman/opencode-agy-auth@1.4.8.
See all versions of @anthonyhaussman/opencode-agy-auth for other recorded verdicts.
- Review the evidence and your use of @anthonyhaussman/opencode-agy-auth@1.4.8 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.