registry / @herjarsa/omo-meta-governor / 0.38.0

@herjarsa/omo-meta-governor@0.38.0

⚠ Under review

Self-judging agent orchestration layer for OpenCode. Reads memory, scores sessions, dispatches decisions.

AI Security Review

scanned 12d ago · by lpm-firewall-ai

The inspected files do not establish malicious behavior, and the package has no declared install lifecycle hook. The required archive is binary/unreadable as UTF-8 source, so its contents remain unresolved and a clean verdict is not supported.

Static reason

One or more suspicious static signals were detected.; source matched previously finalized malicious package; routed for review

Trigger

No install lifecycle hook is declared; inspected MCP behaviors activate through tool calls.

Impact

No confirmed attack impact was identified; the uninspected archive prevents a clean determination.

Mechanism

The MCP source includes skill catalog requests and optional skill materialization. The inspected excerpts do not establish covert execution or agent control hijacking.

AI rationale

Evidence

dist/index.jsdist/lib.jsdist/mcp-server.js

Network endpoints1

skills.sh/api/search

Decision evidence

public snapshot

AI called this Manual Review at 74.0% confidence as Unknown with medium false-positive risk.

AI review observations

package.json points to dist/index.js and declares no install lifecycle hook.
The inspected agent-related code excerpts in dist/index.js and dist/lib.js do not establish agent configuration mutation.
dist/mcp-server.js contains explicit skill search and materialization behavior, including a caller-controlled autoMaterialize option.
dist/skills/chore.tar.gz could not be inspected as UTF-8 source, leaving a required artifact unresolved.

Evidence against

The available executable excerpts show package features and runtime dependencies, but do not establish an attack.

Behavioral surface

Source

ChildProcessEnvironmentVarsEvalNetwork

Supply chain

HighEntropyStringsMinifiedUrlStrings

ManifestNo manifest risk signals triggered.

scanned 3 file(s), 1.44 MB of source, external domains: 127.0.0.1, github.com, json-schema.org, pypi.org, raw.githubusercontent.com, skills-library.com, skills.sh

Source & flagged code

9 flagged

dist/lib.jsView file

1import{createRequire as yO}from"node:module";var mO=Object.defineProperty;var fO=($)=>$;function uO($,v){this[$]=fO.bind(null,v)}var L$=($,v)=>{for(var z in v)mO($,z,{get:v[z],enum... L2: `}catch{X=JSON.stringify({timestamp:_.timestamp,level:$,message:v,data:"[unserializable]"})+`

High

Child Process

Package source references child process execution.

dist/lib.jsView on unpkg · L1

2`}catch{X=JSON.stringify({timestamp:_.timestamp,level:$,message:v,data:"[unserializable]"})+` L3: `}try{rO(V$,X)}catch{}if($==="error")console.error(`[meta-governor] ${v}`)}function A($,v,z){EJ($,v,z)}function v9($){EJ($.level,$.message,$.data,$.event,$.sessionID)}function U9()... L4: const OMO_MG_WATCH = 1;

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/lib.jsView on unpkg · L2

167content_hash = excluded.content_hash L168: `).run($.id,$.name,$.description,$.repo_url,$.installs??0,$.skill_id,$.download_count??0,$.last_synced??v,$.content_hash),Promise.resolve($.id)}setSkillMaterializedAt($,v){this.db.... L169: `)}var Mv=($)=>(v,z,b,U)=>{let N=b?Object.assign(b,{async:!1}):{async:!1},J=v._zod.run({value:z,issues:[]},N);if(J instanceof Promise)throw new R$;if(J.issues.length){let _=new(U?....

Low

Eval

Package source references a known benign dynamic code generation pattern.

dist/lib.jsView on unpkg · L167

dist/mcp-server.jsView file

4|| (${Q} === "string" && ${z} && ${z} == +${z} && !(${z} % 1))`).assign(Y,c._`+${z}`);return;case"boolean":X.elseIf(c._`${z} === "false" || ${z} === 0 || ${z} === null`).assign(Y,!... L5: || ${Q} === "boolean" || ${z} === null`).assign(Y,c._`[${z}]`)}}}function FF({gen:$,parentData:U,parentDataProperty:J},X){$.if(c._`${U} !== undefined`,()=>$.assign(c._`${U}[${J}]`,... L6: missingProperty: ${X}, L7: depsCount: ${U}, L8: deps: ${J}}`};var NP={keyword:"dependencies",type:"object",schemaType:"object",error:HO.error,code($){let[U,J]=OP($);OO($,U),BO($,J)}};function OP({schema:$}){let U={},J={};for(let... L9: `}catch{b=JSON.stringify({timestamp:Y.timestamp,level:$,message:U,data:"[unserializable]"})+`

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

dist/mcp-server.jsView on unpkg · L4

1import{createRequire as ow}from"node:module";var hw=Object.create;var{getPrototypeOf:uw,defineProperty:u9,getOwnPropertyNames:mw}=Object;var lw=Object.prototype.hasOwnProperty;func... L2: `:""},this._extScope=$,this._scope=new Y6.Scope({parent:$}),this._nodes=[new b3]}toString(){return this._root.render(this.opts)}name($){return this._scope.name($)}scopeName($){retu... L3: || (${Q} == "string" && ${z} && ${z} == +${z})`).assign(Y,c._`+${z}`);return;case"integer":X.elseIf(c._`${Q} === "boolean" || ${z} === null L4: || (${Q} === "string" && ${z} && ${z} == +${z} && !(${z} % 1))`).assign(Y,c._`+${z}`);return;case"boolean":X.elseIf(c._`${z} === "false" || ${z} === 0 || ${z} === null`).assign(Y,!... L5: || ${Q} === "boolean" || ${z} === null`).assign(Y,c._`[${z}]`)}}}function FF({gen:$,pare

High

Command Output Exfiltration

Source combines command execution, command-output handling, and outbound requests; review data flow before blocking.

dist/mcp-server.jsView on unpkg · L1

dist/skills/chore.tar.gzView file

•path = dist/skills/chore.tar.gz kind = high_entropy_blob sizeBytes = 131389 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

dist/skills/chore.tar.gzView on unpkg

•path = dist/skills/chore.tar.gz kind = compressed_blob sizeBytes = 131389 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

dist/skills/chore.tar.gzView on unpkg

Source & flagged code

9 flagged · loading source

dist/lib.jsView file

High

Child Process

Package source references child process execution.

dist/lib.jsView on unpkg · L1

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

dist/lib.jsView on unpkg · L2

Low

Findings

7 High4 Medium4 Low

HighChild Processdist/lib.js

HighSame File Env Network Executiondist/mcp-server.js

HighCommand Output Exfiltrationdist/mcp-server.js

HighTrigger Reachable Command Output Exfiltrationdist/mcp-server.js

HighRuntime Package Installdist/lib.js

HighShips High Entropy Blobdist/skills/chore.tar.gz

HighKnown Malware Source Similaritydist/mcp-server.js

MediumNetwork

MediumEnvironment Vars

MediumShips Compressed Blobdist/skills/chore.tar.gz

MediumStructural Risk Force Deep Review

LowScripts Present

LowEvaldist/lib.js

Affected versions and remediation

This report applies to @herjarsa/omo-meta-governor@0.38.0.

See all versions of @herjarsa/omo-meta-governor for other recorded verdicts.

Review the evidence and your use of @herjarsa/omo-meta-governor@0.38.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-10 22:07:28.757Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.