@brainervirus/workit-opencode@8.20.0
Workit OpenCode plugin — native tools, adaptive policy, and sixteen method skills
AI Security Review
scanned 14h ago · by lpm-firewall-aiThe source shows conditional credential exposure because the generated YouTrack configuration uses a placeholder default endpoint and requests attach the local token to that endpoint. The token flow is tied to user-configured YouTrack use, so the evidence does not establish a malicious attack.
Static reason
One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review; source fingerprint signature matched known malicious package; routed for review
Trigger
A user configures a YouTrack token and invokes a feature that makes a YouTrack request.
Impact
If the default URL remains in place, the token may be disclosed to that destination.
Mechanism
The request helper puts the token in an Authorization bearer header; the generated configuration defaults the base URL to youtrack.example.com.
AI rationale
The source shows conditional credential exposure because the generated YouTrack configuration uses a placeholder default endpoint and requests attach the local token to that endpoint. The token flow is tied to user-configured YouTrack use, so the evidence does not establish a malicious attack.
Evidence
dist/plugin.js
Network endpoints1
youtrack.example.com
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The YouTrack configuration generator defaults the service URL to youtrack.example.com.
- The YouTrack request helper sends its supplied token as a bearer credential to the request URL.
- The scaffold creates a token placeholder and directs the user to replace it before running /wk-status.
Evidence against
- The manifest has no install lifecycle hook; the bundled plugin is the runtime entrypoint.
- The YouTrack token is read from a configured local file, and requests use the configured service base URL.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
5 flagged · loading sourcedist/plugin.jsView file
6// packages/workit-core/src/core.ts
L7: import { spawnSync as spawnSync16 } from "node:child_process";
L8: import { existsSync as existsSync8, realpathSync as realpathSync5 } from "node:fs";
High
•Manifest-reachable source captures an API credential, sends it to a fixed unofficial gateway, and persists that redirection in agent or shell configuration.
dist/plugin.js:
decision: "Record or revoke a user decision (never an authorization).",
fs3.writeFileSync(fd, raw, "utf8");
writeFileSync
writeFileSync(path3.join(dir, "config.json"), JSON.stringify(config, null, 2) + `
youtrack: object({ baseUrl: nonBlank.optional(), link_issues: boolean2().optional() }).passthrough().optional(),
baseUrl: text2(yt.baseUrl),
if (common.baseUrl)
return { provider: "youtrack", link: false, ...common, source: "youtrack.baseUrl" };
High
Credential Redirect Persistence
Manifest-reachable source sends a prompted API credential to a fixed unofficial gateway and persists the redirection.
dist/plugin.jsView on unpkg6// packages/workit-core/src/core.ts
L7: import { spawnSync as spawnSync16 } from "node:child_process";
L8: import { existsSync as existsSync8, realpathSync as realpathSync5 } from "node:fs";
...
L396: for (let i = 0;i < units - 1; i++) {
L397: if ((str.charCodeAt(i) & 64512) === 55296 && (str.charCodeAt(i + 1) & 64512) === 56320) {
L398: count--;
...
L830: }
L831: return result.issues.length ? failure(_Err, result.issues, ctx) : { success: true, data: result.value };
L832: };
...
L1706: return false;
L1707: return canParseURL(`http://[${value}]`);
L1708: }
Findings
5 High2 Medium5 Low
HighChild Processdist/plugin.js
HighCredential Redirect Persistencedist/plugin.js
HighCommand Output Exfiltrationdist/plugin.js
HighKnown Malware Source Similaritydist/plugin.js
HighKnown Malware Source Fingerprint Signaturedist/plugin.js
MediumNetwork
MediumEnvironment Vars
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @brainervirus/workit-opencode@8.20.0.
See all versions of @brainervirus/workit-opencode for other recorded verdicts.
- Review the evidence and your use of @brainervirus/workit-opencode@8.20.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.