registry / @brainervirus/workit-opencode / 1.0.9
@brainervirus/workit-opencode@1.0.9
Workit OpenCode plugin — native tools, adaptive policy, and fourteen method skills
AI Security Review
scanned 26d ago · by lpm-firewall-aiThe package has no automatic install hook, and the inspected workspace-writing helper is confirmation-gated. No concrete malicious behavior was established by static source inspection.
Static reason
One or more suspicious static signals were detected.
Trigger
The plugin is loaded by OpenCode.
Impact
No unconsented install-time action, credential export, or destructive behavior was established.
Mechanism
The plugin registers its tools with the supplied OpenCode client; workspace mutation helpers require explicit confirmation.
AI rationale
The package has no automatic install hook, and the inspected workspace-writing helper is confirmation-gated. No concrete malicious behavior was established by static source inspection.
Decision evidence
public snapshotAI called this Clean at 89.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The manifest exposes the bundled plugin and lists only build and type-check scripts; it has no install lifecycle hook.
- The plugin's project gitignore writer requires an explicit confirmation value before it can modify a workspace file.
- The exported plugin initializes OpenCode tools using the host-provided client and directory.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
5 flagged · loading sourcedist/plugin.jsView file
21// packages/workit-core/src/core.ts
L22: import { spawnSync as spawnSync2 } from "node:child_process";
L23: import { existsSync as existsSync3, realpathSync as realpathSync5 } from "node:fs";
High
21// packages/workit-core/src/core.ts
L22: import { spawnSync as spawnSync2 } from "node:child_process";
L23: import { existsSync as existsSync3, realpathSync as realpathSync5 } from "node:fs";
...
L422: for (let i = 0;i < units - 1; i++) {
L423: if ((str.charCodeAt(i) & 64512) === 55296 && (str.charCodeAt(i + 1) & 64512) === 56320) {
L424: count--;
...
L848: error: new (_Err ?? $ZodError)(result.issues.map((iss) => finalizeIssue(iss, ctx, config())))
L849: } : { success: true, data: result.value };
L850: };
...
L1723: try {
L1724: new URL(`http://[${value}]`);
L1725: return true;
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/plugin.jsView on unpkg · L2127273var ensureProjectGitignore = (workspaceRoot, confirmed) => {
if (!confirmed)
return { ok: false, error: "confirmed: true required" };
const file = path14.join(workspaceRoot, ".gitignore");
const existing = existsSync7(file) ? readFileSync7(file, "utf8") : "";
const existingLines = new Set(existing.split(`
`).map((l) => l.trim()).filter(Boolean));
const added = [];
Findings
3 High2 Medium7 Low
HighChild Processdist/plugin.js
HighShell
HighCommand Output Exfiltrationdist/plugin.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/plugin.js
LowAi Review Evidencedist/plugin.js
Affected versions and remediation
This report applies to @brainervirus/workit-opencode@1.0.9.
See all versions of @brainervirus/workit-opencode for other recorded verdicts.
- Review the evidence and your use of @brainervirus/workit-opencode@1.0.9 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.