@plannotator/opencode@0.28.15
Plannotator plugin for OpenCode - interactive plan review with visual annotation
AI Security Review
scanned 24d ago · by lpm-firewall-aiThe install-time hook mutates OpenCode configuration by copying the package's own commands and skill, which is a first-party extension setup risk. Its inspected activation guard, limited copy behavior, and lack of network or credential handling support a warning rather than a block.
Decision evidence
public snapshot- package.json runs scripts/postinstall.cjs during installation.
- The hook copies package command files and a skill into the user's OpenCode configuration.
- Automatic copying is limited to paths inside node_modules unless an environment override changes the decision.
- The hook runs only when invoked as the main script and performs no network request in the inspected code.
- The inspected hook is focused on setting up this OpenCode plugin's commands and skill; no credential collection or remote payload execution was identified.
Source & flagged code
4 flaggedPackage defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage source references dynamic require/import behavior.
dist/server.jsView on unpkg · L5684Findings
Affected versions and remediation
This report applies to @plannotator/opencode@0.28.15.
See all versions of @plannotator/opencode for other recorded verdicts.
- Review the evidence and your use of @plannotator/opencode@0.28.15 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.