registry / @brainervirus/workit-opencode / 0.8.11

@brainervirus/workit-opencode@0.8.11

Workit OpenCode plugin (thin wrapper over @brainervirus/workit-core)

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

This is not concrete malware, but its runtime agent-control hooks warrant a warning under the extension lifecycle policy. Network/token code is for configured first-party service operations rather than a fixed unofficial gateway.

Static reason

No blocking static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

User installs/enables the plugin and starts an OpenCode session.

Impact

Can constrain agent workflow and permission behavior for sessions using this plugin.

Mechanism

First-party OpenCode extension hooks mutate runtime config and chat context.

AI rationale

Evidence

package.jsondist/plugin.jsassets/templates/superpowers-doc-contract.mdassets/skills/assets/vendor/superpowers/skills/

Decision evidence

public snapshot

AI called this Suspicious at 87.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

Runtime plugin adds package-owned commands/skills and rewrites OpenCode permissions.
Chat hook injects a package contract that says it overrides conflicting defaults.

Evidence against

package.json has no preinstall/install/postinstall hooks.
No fixed credential gateway or remote payload execution found.
Token-bearing requests target user-configured YouTrack/GitLab APIs and are explicit tool operations.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 4 file(s), 801 KB of source, external domains: bun.sh, cli.github.com, enghouseamg.youtrack.cloud, github.com, gitlab.com, json-schema.org, keepachangelog.com, primeradiant.com, semver.org, www.jetbrains.com

Source & flagged code

6 flagged

assets/vendor/superpowers/skills/brainstorming/scripts/server.cjsView file

Lines 1-21javascript

1const crypto = require('crypto');

2const http = require('http');

3const fs = require('fs');

4const path = require('path');

6// ========== WebSocket Protocol (RFC 6455) ==========

8const OPCODES = { TEXT: 0x01, CLOSE: 0x08, PING: 0x09, PONG: 0x0A };

9const WS_MAGIC = '258EAFA5-E914-47DA-95CA-C5AB0DC85B11';

10const MAX_FRAME_PAYLOAD_BYTES = 10 * 1024 * 1024;

12function computeAcceptKey(clientKey) {

13 return crypto.createHash('sha1').update(clientKey + WS_MAGIC).digest('base64');

14}

Low

Weak Crypto

Package source references weak cryptographic algorithms.

assets/vendor/superpowers/skills/brainstorming/scripts/server.cjsView on unpkg · L1

16function encodeFrame(opcode, payload) {

17 const fin = 0x80;

18 const len = payload.length;

19 let header;

21 if (len < 126) {

•matchType = normalized_sha256 matchedPackage = @brainervirus/workit-opencode@0.8.5 matchedPath = [redacted].cjs matchedIdentity = npm:[redacted]:0.8.5 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

assets/vendor/superpowers/skills/brainstorming/scripts/server.cjsView on unpkg

dist/plugin.jsView file

•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration. dist/plugin.js: writeFileSync writeFileSync(path.join(dir, "config.json"), JSON.stringify(config, null, 2) + ` import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, readdirSync as readdirSync2, writeFileSync as writeFileSync2 } from "node:fs"; writeFileSync2(file, md, "utf8"); import { writeFileSync as writeFileSync3 } from "node:fs"; function writeFileExclusive(file, content, mode) { writeFileSync3(file, content, { encoding: "utf8", flag: "wx", mode }); writeFileSync as writeFileSync7

High

Credential Redirect Persistence

Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.

dist/plugin.jsView on unpkg

•Manifest-reachable source resolves another installed package, overwrites its runtime code, and injects package-defined remote behavior. dist/plugin.js: copyFileSync, writeFileSync copyFileSync(src, dest); writeFileSync(path.join(dir, "config.json"), JSON.stringify(config, null, 2) + ` import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, readdirSync as readdirSync2, writeFileSync as writeFileSync2 } from "node:fs"; writeFileSync2(file, md, "utf8"); HARD-GATE: Workflow-toolkit contract is already loaded below. Follow it on every turn; it overrides conflicting Superpowers defaults (brainstorming chat options, visual companion, ... Execute only the supplied task brief: follow TDD (failing test first), land exactly one contiguous non-empty commit range for

High

Entrypoint Foreign Package Code Overwrite

Manifest-reachable source overwrites another installed package with package-defined remote behavior.

dist/plugin.jsView on unpkg

Source & flagged code

6 flagged · loading source

assets/vendor/superpowers/skills/brainstorming/scripts/server.cjsView file

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

assets/vendor/superpowers/skills/brainstorming/scripts/server.cjsView on unpkg

1const crypto = require('crypto'); L2: const http = require('http'); L3: const fs = require('fs'); ... L12: function computeAcceptKey(clientKey) { L13: return crypto.createHash('sha1').update(clientKey + WS_MAGIC).digest('base64'); L14: } ... L84: L85: const PORT_FILE = process.env.BRAINSTORM_PORT_FILE || null; L86: const randomPort = () => 49152 + Math.floor(Math.random() * 16383); ... L195: try { sessionStorage.setItem('brainstorm-session-key', ${jsonKey}); } catch (e) {} L196: location.replace('/'); L197: </script>

Low

Weak Crypto

Package source references weak cryptographic algorithms.

assets/vendor/superpowers/skills/brainstorming/scripts/server.cjsView on unpkg · L1

Findings

3 High4 Medium5 Low

HighCredential Redirect Persistencedist/plugin.js

HighEntrypoint Foreign Package Code Overwritedist/plugin.js

HighKnown Malware Source Similarityassets/vendor/superpowers/skills/brainstorming/scripts/server.cjs

MediumNetwork

MediumEnvironment Vars

MediumAi Review Evidencedist/plugin.js

LowScripts Present

LowWeak Cryptoassets/vendor/superpowers/skills/brainstorming/scripts/server.cjs

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @brainervirus/workit-opencode@0.8.11.

See all versions of @brainervirus/workit-opencode for other recorded verdicts.

Review the evidence and your use of @brainervirus/workit-opencode@0.8.11 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-22 21:26:08.283Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.