registry / @plannotator/opencode / 0.28.10
@plannotator/opencode@0.28.10
Plannotator plugin for OpenCode - interactive plan review with visual annotation
AI Security Review
scanned 25d ago · by lpm-firewall-aiThe install hook performs guarded first-party OpenCode plugin setup by copying its own commands and skill into OpenCode’s config. This lifecycle config mutation warrants a warning, but the inspected source does not establish malicious behavior.
Static reason
One or more suspicious static signals were detected.
Trigger
Package installation runs the postinstall hook; copying is enabled for a package located under node_modules unless disabled by the override environment variable.
Impact
OpenCode gains this plugin’s commands and skill; inspected behavior does not establish broader control-surface changes or malicious activity.
Mechanism
The hook copies local Markdown command files and the Plannotator skill into OpenCode config directories.
AI rationale
The install hook performs guarded first-party OpenCode plugin setup by copying its own commands and skill into OpenCode’s config. This lifecycle config mutation warrants a warning, but the inspected source does not establish malicious behavior.
Evidence
package.jsonscripts/postinstall.cjs
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- package.json runs a postinstall hook that invokes scripts/postinstall.cjs.
- The hook copies package-owned OpenCode command stubs and a skill into the OpenCode config directory.
- The hook runs for packages under node_modules, with environment overrides to force or skip copying.
Evidence against
- The hook has no network operation in the inspected code; it copies local package assets.
- The write is limited to OpenCode commands and the Plannotator skill, consistent with this OpenCode plugin’s setup.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
4 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/server.jsView file
5645if (existsSync9(builtPath)) {
L5646: return await import(pathToFileURL(builtPath).href);
L5647: }
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/server.jsView on unpkg · L5645Findings
1 High6 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requiredist/server.js
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/embedded.js
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @plannotator/opencode@0.28.10.
See all versions of @plannotator/opencode for other recorded verdicts.
- Review the evidence and your use of @plannotator/opencode@0.28.10 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.