@brainervirus/workit-opencode@8.3.0
Workit OpenCode plugin — native tools, adaptive policy, and sixteen method skills
AI Security Review
scanned 15d ago · by lpm-firewall-aiThe active YouTrack request forwards an existing service token to an operator-configured destination without an evident destination allowlist. This is a conditional credential exposure risk, so warn rather than block.
Static reason
One or more suspicious static signals were detected.
Trigger
A plugin tool path fetches a YouTrack issue using configured credentials.
Impact
Conditional exposure of the configured YouTrack token to the configured endpoint; no fixed package-controlled recipient or automatic activation was established.
Mechanism
The plugin reads the token file, combines the token with the configured base URL, and sends it in an Authorization header.
AI rationale
The active YouTrack request forwards an existing service token to an operator-configured destination without an evident destination allowlist. This is a conditional credential exposure risk, so warn rather than block.
Evidence
dist/plugin.jspackage.json
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest exposes dist/plugin.js as the package entrypoint and has no install lifecycle hook.
- The YouTrack client reads a token from a configured token file and accepts a configured base URL.
- The client sends that token as a Bearer credential to a request built from the configured base URL.
- The request is reachable through plugin tool execution after session and workspace checks.
Evidence against
- The YouTrack request is specific to fetching an issue, and the plugin checks that the active session matches its workspace.
- No install-time execution or package-controlled fixed credential recipient was identified.
Behavioral surface
ChildProcessCryptoEnvironmentVarsEvalFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
5 flagged · loading sourcedist/plugin.jsView file
6// packages/workit-core/src/core.ts
L7: import { spawnSync as spawnSync14 } from "node:child_process";
L8: import { existsSync as existsSync7, realpathSync as realpathSync5 } from "node:fs";
High
6// packages/workit-core/src/core.ts
L7: import { spawnSync as spawnSync14 } from "node:child_process";
L8: import { existsSync as existsSync7, realpathSync as realpathSync5 } from "node:fs";
...
L396: for (let i = 0;i < units - 1; i++) {
L397: if ((str.charCodeAt(i) & 64512) === 55296 && (str.charCodeAt(i + 1) & 64512) === 56320) {
L398: count--;
...
L830: }
L831: return result.issues.length ? failure(_Err, result.issues, ctx) : { success: true, data: result.value };
L832: };
...
L1706: return false;
L1707: return canParseURL(`http://[${value}]`);
L1708: }
High
Command Output Exfiltration
Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.
dist/plugin.jsView on unpkg · L618327var youTrackToken = () => {
const loaded = readYouTrackConfig(true);
if ("error" in loaded)
return loaded;
const tokenFile = String(loaded.config.tokenFile ?? "");
const tokenPath = tokenFile ? path18.isAbsolute(tokenFile)
Findings
2 High5 Medium5 Low
HighChild Processdist/plugin.js
HighCommand Output Exfiltrationdist/plugin.js
MediumNetwork
MediumEnvironment Vars
MediumSuspicious Lifecycle Evidencepackage.json
MediumAi Review Evidencedist/plugin.js
MediumAi Review Evidencedist/plugin.js
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @brainervirus/workit-opencode@8.3.0.
See all versions of @brainervirus/workit-opencode for other recorded verdicts.
- Review the evidence and your use of @brainervirus/workit-opencode@8.3.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.