registry / @linjz/opencode-qqbot / 0.3.12
@linjz/opencode-qqbot@0.3.12
QQ Bot for OpenCode AI - chat with AI coding assistant via QQ
AI Security Review
scanned 2d ago · by lpm-firewall-aiThe inspected credentials go to QQ's official token service, while OpenCode discovery is limited to loopback endpoints. The plugin can start the bot when configured, consistent with the package's stated purpose; no malicious behavior was found.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
The user runs the bot or enables the OpenCode plugin with QQ credentials configured.
Impact
Expected operation is QQ-based interaction with the user's OpenCode assistant. No unrelated credential transfer or account action was identified.
Mechanism
The bot authenticates with QQ's official APIs and connects to the configured OpenCode API; discovery probes local loopback ports.
AI rationale
The inspected credentials go to QQ's official token service, while OpenCode discovery is limited to loopback endpoints. The plugin can start the bot when configured, consistent with the package's stated purpose; no malicious behavior was found.
Evidence
~/.openqq/.env~/.openqq/last-discovered.json~/.openqq/opencode-events.jsonl~/.openqq/bot.out.log
Network endpoints4
api.sgroup.qq.combots.qq.com/app/getAppAccessTokensandbox.api.sgroup.qq.com127.0.0.1:<port>/api
Decision evidence
public snapshotAI called this Clean at 91.0% confidence as Benign with low false-positive risk.
Evidence for AI clean decision
- The package describes itself as a QQ bot for chatting with the OpenCode coding assistant.
- The setup command asks the user to scan a QQ QR code before saving QQ bot credentials locally.
- QQ credentials are sent to QQ's token endpoint, and bot API traffic uses QQ's official API hosts.
- OpenCode discovery probes loopback addresses and uses the configured OpenCode password for that local API.
- The plugin starts the bot when credentials are configured, matching the package's stated QQ bot function.
Evidence against
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggedbin/openqq.jsView file
6// 注意：本文件必须保持纯 JS（无类型标注）——node 用户直接执行它。
L7: import { spawnSync } from "node:child_process"
L8: import { existsSync } from "node:fs"
High
6Cross-file remote execution chain: bin/openqq.js spawns dist/openqq-bot.js; helper contains network access plus dynamic code execution.
L6: // 注意：本文件必须保持纯 JS（无类型标注）——node 用户直接执行它。
L7: import { spawnSync } from "node:child_process"
L8: import { existsSync } from "node:fs"
...
L17: const candidates = ["bun", "bun.exe", "bun.cmd", "bun.bat"]
L18: if (process.platform === "win32") {
L19: const appdata = process.env.APPDATA || join(process.env.USERPROFILE || "", "AppData", "Roaming")
L20: candidates.push(join(appdata, "npm", "node_modules", "bun", "bin", "bun.exe"))
High
Cross File Remote Execution Context
Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.
bin/openqq.jsView on unpkg · L6dist/openqq-bot.jsView file
Findings
1 Critical3 High2 Medium6 Low
CriticalPrevious Version Dangerous Deltadist/opencode-qqbot-plugin.js
HighChild Processbin/openqq.js
HighShelldist/openqq-bot.js
HighCross File Remote Execution Contextbin/openqq.js
MediumNetwork
MediumEnvironment Vars
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowAi Review Evidencepackage.json
Affected versions and remediation
This report applies to @linjz/opencode-qqbot@0.3.12.
See all versions of @linjz/opencode-qqbot for other recorded verdicts.
- Review the evidence and your use of @linjz/opencode-qqbot@0.3.12 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.