registry / @brainervirus/workit-opencode / 1.1.1
@brainervirus/workit-opencode@1.1.1
Workit OpenCode plugin — native tools, adaptive policy, and fourteen method skills
AI Security Review
scanned 21d ago · by lpm-firewall-aiThe flagged primitives are consistent with the active workflow plugin and its configured service integrations. Static inspection found no concrete malicious chain, so the scanner signals do not justify a warning or block.
Static reason
One or more suspicious static signals were detected.
Trigger
Loading the OpenCode plugin and invoking its tools activates the inspected behavior.
Impact
Expected workflow operations can modify repository and service state; no malicious installation behavior or covert data export was established.
Mechanism
The plugin registers tools, runs repository commands, and sends authenticated service requests using configured credentials.
AI rationale
The flagged primitives are consistent with the active workflow plugin and its configured service integrations. Static inspection found no concrete malicious chain, so the scanner signals do not justify a warning or block.
Evidence
youtrack.jsonyoutrack.token
Network endpoints3
api.github.comgitlab.com/api/v4enghouseamg.youtrack.cloud
Decision evidence
public snapshotAI called this Clean at 87.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- package.json has only build and typecheck scripts, no install lifecycle hooks or runtime self-dependency.
- dist/plugin.js registers Workit tools through the OpenCode plugin entrypoint.
- Command execution uses executable and argument arrays in the repository working directory.
- Setup requires confirmation and creates a dedicated token placeholder for caller-supplied YouTrack credentials.
- Network requests implement authenticated tracker and repository workflows; no covert recipient or command-output exfiltration was identified.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
5 flagged · loading sourcedist/plugin.jsView file
21// packages/workit-core/src/core.ts
L22: import { spawnSync as spawnSync3 } from "node:child_process";
L23: import { existsSync as existsSync6, realpathSync as realpathSync6 } from "node:fs";
High
21// packages/workit-core/src/core.ts
L22: import { spawnSync as spawnSync3 } from "node:child_process";
L23: import { existsSync as existsSync6, realpathSync as realpathSync6 } from "node:fs";
...
L422: for (let i = 0;i < units - 1; i++) {
L423: if ((str.charCodeAt(i) & 64512) === 55296 && (str.charCodeAt(i + 1) & 64512) === 56320) {
L424: count--;
...
L848: error: new (_Err ?? $ZodError)(result.issues.map((iss) => finalizeIssue(iss, ctx, config())))
L849: } : { success: true, data: result.value };
L850: };
...
L1723: try {
L1724: new URL(`http://[${value}]`);
L1725: return true;
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/plugin.jsView on unpkg · L2133147const tools = {
...createWorkitTools({ client, receipts, directChildren }),
workit_init_apply: createRepoTools().workit_init_apply
};
const timesta
Findings
2 High2 Medium8 Low
HighChild Processdist/plugin.js
HighCommand Output Exfiltrationdist/plugin.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowSuspicious Lifecycle Evidencepackage.json
LowAi Review Evidencedist/plugin.js
LowAi Review Evidencedist/plugin.js
Affected versions and remediation
This report applies to @brainervirus/workit-opencode@1.1.1.
See all versions of @brainervirus/workit-opencode for other recorded verdicts.
- Review the evidence and your use of @brainervirus/workit-opencode@1.1.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.