registry / @brainervirus/workit-opencode / 1.0.12

@brainervirus/workit-opencode@1.0.12

Workit OpenCode plugin — native tools, adaptive policy, and fourteen method skills

AI Security Review

scanned 21d ago · by lpm-firewall-ai

The inspected source supports ordinary workflow-plugin behavior, with no install hooks, self-dependency chain, or concrete covert attack. Scanner signals arise from repository commands, configured service authentication, and expected host integration.

Static reason

One or more suspicious static signals were detected.

Trigger

Loading the plugin activates host callbacks; invoking its tools activates workflow operations.

Impact

These operations can modify workflow state and perform repository actions; inspected source did not establish covert exfiltration or malicious installation behavior.

Mechanism

The plugin registers session-checked tools, runs repository and hosting commands, and authenticates to configured service APIs.

AI rationale

Network endpoints2

api.github.comgitlab.com/api/v4

Decision evidence

public snapshot

AI called this Clean at 87.0% confidence as Benign with low false-positive risk.

Evidence for AI clean decision

package.json has only build and typecheck scripts, with no install lifecycle hooks or runtime self-dependency.
The active plugin registers Workit workflow tools and an initialization tool.
Command execution uses executable arguments and a repository working directory without enabling a shell.
YouTrack requests use a token file and service endpoint supplied through configuration; no unrelated credential harvesting was identified.
Active workflow tools require host session observation and matching workspace identity.
The host configuration callback adds workflow restrictions, including denying direct Git worktree commands.

Evidence against

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 1.15 MB of source, external domains: api.github.com, cli.github.com, enghouseamg.youtrack.cloud, github.com, gitlab.com, json-schema.org, keepachangelog.com, semver.org, www.jetbrains.com

Source & flagged code

5 flagged

dist/plugin.jsView file

21// packages/workit-core/src/core.ts L22: import { spawnSync as spawnSync3 } from "node:child_process"; L23: import { existsSync as existsSync6, realpathSync as realpathSync6 } from "node:fs";

High

Child Process

Package source references child process execution.

dist/plugin.jsView on unpkg · L21

21// packages/workit-core/src/core.ts L22: import { spawnSync as spawnSync3 } from "node:child_process"; L23: import { existsSync as existsSync6, realpathSync as realpathSync6 } from "node:fs"; ... L422: for (let i = 0;i < units - 1; i++) { L423: if ((str.charCodeAt(i) & 64512) === 55296 && (str.charCodeAt(i + 1) & 64512) === 56320) { L424: count--; ... L848: error: new (_Err ?? $ZodError)(result.issues.map((iss) => finalizeIssue(iss, ctx, config()))) L849: } : { success: true, data: result.value }; L850: }; ... L1723: try { L1724: new URL(`http://[${value}]`); L1725: return true;

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/plugin.jsView on unpkg · L21

32762const tools = { ...createWorkitTools({ client, receipts, directChildren }), workit_init_apply: createRepoTools().workit_init_apply }; con

Low

Ai Review Evidence

The active plugin registers Workit workflow tools and an initialization tool.

dist/plugin.jsView on unpkg · L32762

14869function run2(root, executable, args, env = {}) { const cwd = realpathSync6(root); const result = spawnSync3(executable, args, { cwd, encoding: "utf8", env: { ...process.env, ...env } }); return { exitCode: result.status ??

Low

Ai Review Evidence

Command execution uses executable arguments and a repository working directory without enabling a shell.

dist/plugin.jsView on unpkg · L14869

package.jsonView file

Lines 16-50json

16 "bugs": {

17 "url": "https://github.com/BrainerVirus/workit/issues"

18 },

19 "license": "MIT",

20 "repository": {

21 "type": "git",

Source & flagged code

5 flagged · loading source

dist/plugin.jsView file

21// packages/workit-core/src/core.ts L22: import { spawnSync as spawnSync3 } from "node:child_process"; L23: import { existsSync as existsSync6, realpathSync as realpathSync6 } from "node:fs";

High

Child Process

Package source references child process execution.

dist/plugin.jsView on unpkg · L21

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/plugin.jsView on unpkg · L21

32762const tools = { ...createWorkitTools({ client, receipts, directChildren }), workit_init_apply: createRepoTools().workit_init_apply }; con

Findings

3 High2 Medium7 Low

HighChild Processdist/plugin.js

HighShell

HighCommand Output Exfiltrationdist/plugin.js

MediumNetwork

MediumEnvironment Vars

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowSuspicious Lifecycle Evidencepackage.json

LowAi Review Evidencedist/plugin.js

Affected versions and remediation

This report applies to @brainervirus/workit-opencode@1.0.12.

See all versions of @brainervirus/workit-opencode for other recorded verdicts.

Review the evidence and your use of @brainervirus/workit-opencode@1.0.12 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-01 22:34:00.274Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.