Loading npm security reports…

@leo.gimp/opencode-usage-bar@2.0.0: AI-agent control-surface risk | LPM Firewall

registry / @leo.gimp/opencode-usage-bar / 2.0.0

@leo.gimp/opencode-usage-bar@2.0.0

OpenCode Go subscription usage bars for the opencode v2 TUI - 5h/weekly/monthly windows, /limit popup

AI Security Review

scanned 17d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. An automatic npm postinstall modifies the user's global OpenCode CLI configuration and registers this package as a plugin. This creates an unconsented AI-agent control-surface change.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

Installing the package through npm triggers postinstall.

Impact

A future OpenCode launch loads the package-controlled plugin from the user's global configuration.

Mechanism

The installer creates a package-controlled plugin copy, appends its directory to cli.json plugins, and writes the configuration.

Policy narrative

npm installation automatically invokes scripts/install.mjs. It copies plugin files into the OpenCode configuration directory, adds the copied directory to the global plugins list in cli.json, and writes that configuration. OpenCode can then load the package plugin on later launches without an explicit setup command.

AI rationale

The package uses an automatic postinstall hook to mutate a global AI-agent plugin control surface. This is concrete unconsented persistence into OpenCode configuration, so it meets the install-control-surface block policy.

Evidence

package.jsonscripts/install.mjs

Decision evidence

public snapshot

AI identified this as a dangerous AI-agent capability at 98.0% confidence with low false-positive risk.

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

18"scripts": { "build": "node scripts/build.mjs", "install-plugin": "node scripts/install.mjs", "postinstall": "node scripts/install.mjs"

High

Ai Review Evidence

The package automatically runs its installer after npm installation.

package.jsonView on unpkg · L18

•scripts.postinstall = node scripts/install.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/install.mjsView file

1#!/usr/bin/env node L2: import { cpSync, existsSync, mkdirSync, readdirSync, readFileSync, writeFileSync } from "node:fs" L3: import { homedir, EOL } from "node:os" ... L8: const distDir = path.join(pkgRoot, "dist") L9: const configDir = process.env.OPENCODE_CONFIG_DIR L10: ? path.resolve(process.env.OPENCODE_CONFIG_DIR) L11: : path.join(process.env.XDG_CONFIG_HOME ? process.env.XDG_CONFIG_HOME : path.join(homedir(), ".config"), "opencode") ... L23: // see https://github.[redacted]) L24: mkdirSync(path.join(targetDir, "dist"), { recursive: true }) L25: cpSync(distDir, path.join(targetDir, "dist"), { recursive: true, dereference: true }) L26: // Local-path plugin targets are resolved by opencode as `<target>/tui` (extension ... L31: for (const name of readdirSync(distDir)) {

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/install.mjsView on unpkg · L1

126const applyEntry = (config, key) => { const list = Array.isArray(config[key]) ? config[key] : [] let replaced = false const next = list.map((item) => { if (!isOurSpec(item) || replaced) return item replaced = true return replaceSpec(item) }) if (!replaced) next.push(targetDir) config[key] = next return replaced }

High

Ai Review Evidence

The installer adds its target directory to the global OpenCode CLI plugins list.

scripts/install.mjsView on unpkg · L126

139const replaced = applyEntry(cliConfig, "plugins") if (!cliConfig.$schema) cliConfig.$schema = "https://opencode.ai/v2/cli.json" mkdirSync(configDir, { recursive: true }) writeFileSync(cliPath, JSON.stringify(cliConfig, null, 2) + EOL) log(`${replaced ? "updated" : "added"} entry in ${cliPath}`)

High

Ai Review Evidence

The installer writes the modified global CLI configuration to disk.

Lines 106-159javascript

106let cliConfig

107try {

108 cliConfig = JSON.parse(readFileSync(cliPath, "utf8").replace(/^\uFEFF/, ""))

109} catch {

110 cliConfig = {}

111}

112

113const isOurSpec = (value) => {

114 const spec = Array.isArray(value) ? value[0] : typeof value === "object" && value !== null ? value.package : value

115 return typeof spec === "string" && spec.toLowerCase().includes("usage-bar")

116}

117

118const replaceSpec = (item) => {

119 if (Array.isArray(item) && item.length > 1) {

120 // V1 tuple form [spec, options] -> V2 object form.

121 return { package: targetDir, options: item[1] }

122 }

123 return targetDir

124}

125

126const applyEntry = (config, key) => {

127 const list = Array.isArray(config[key]) ? config[key] : []

128 let replaced = false

129 const next = list.map((item) => {

130 if (!isOurSpec(item) || replaced) return item

131 replaced = true

132 return replaceSpec(item)

133 })

134 if (!replaced) next.push(targetDir)

135 config[key] = next

136 return replaced

137}

High

Ai Review Evidence

The installer adds its target directory to the global OpenCode CLI plugins list.

scripts/install.mjsView on unpkg · L126

138

139const replaced = applyEntry(cliConfig, "plugins")

140if (!cliConfig.$schema) cliConfig.$schema = "https://opencode.ai/v2/cli.json"

141

142mkdirSync(configDir, { recursive: true })

143writeFileSync(cliPath, JSON.stringify(cliConfig, null, 2) + EOL)

144log(`${replaced ? "updated" : "added"} entry in ${cliPath}`)

High

Ai Review Evidence

The installer writes the modified global CLI configuration to disk.

scripts/install.mjsView on unpkg · L139

145

146try {

147 let tuiPath = path.join(configDir, "tui.json")

148 if (!existsSync(tuiPath) && existsSync(path.join(configDir, "tui.jsonc"))) {

149 tuiPath = path.join(configDir, "tui.jsonc")

150 }

151 if (!existsSync(tuiPath)) throw new Error("no legacy tui.json")

152 const tuiConfig = JSON.parse(readFileSync(tuiPath, "utf8").replace(/^\uFEFF/, ""))

153 if (Array.isArray(tuiConfig.plugin) && tuiConfig.plugin.some(isOurSpec)) {

154 applyEntry(tuiConfig, "plugin")

155 writeFileSync(tuiPath, JSON.stringify(tuiConfig, null, 2) + EOL)

156 log(`updated legacy entry in ${tuiPath}`)

157 }

158} catch {

159 // No legacy tui.json (or unreadable) - nothing to migrate.