registry / @plannotator/opencode / 0.28.16
@plannotator/opencode@0.28.16
Plannotator plugin for OpenCode - interactive plan review with visual annotation
AI Security Review
scanned 24d ago · by lpm-firewall-aiThe postinstall hook performs first-party OpenCode command and skill setup, creating an agent extension lifecycle risk. Inspected source did not show a concrete malicious chain or consumer dependency-approval expansion.
Static reason
One or more suspicious static signals were detected.
Trigger
Package installation runs the postinstall hook when scripts are enabled; the hook also supports an explicit environment override.
Impact
This changes the agent's available commands and skill configuration. The inspected behavior is first-party package setup and did not establish a concrete attack.
Mechanism
It copies Markdown files from the package's commands directory and a skill file into the OpenCode config directory.
AI rationale
The postinstall hook performs first-party OpenCode command and skill setup, creating an agent extension lifecycle risk. Inspected source did not show a concrete malicious chain or consumer dependency-approval expansion.
Evidence
package.jsonscripts/postinstall.cjs
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package runs a postinstall script that may write OpenCode commands and a skill into the user's configuration directory.
- The script copies package-provided command stubs and skill files when the package is under node_modules; an environment variable can also force copying.
Evidence against
- The postinstall copies only Markdown command files and one skill file; inspected code showed no network transfer or unrelated dependency-approval change in this setup path.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsUrlStrings
Source & flagged code
4 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdist/server.jsView file
5691if (existsSync9(builtPath)) {
L5692: return await import(pathToFileURL(builtPath).href);
L5693: }
Medium
Dynamic Require
Package source references dynamic require/import behavior.
dist/server.jsView on unpkg · L5691Findings
1 High6 Medium6 Low
HighInstall Time Lifecycle Scriptspackage.json
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requiredist/server.js
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filedist/embedded.js
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @plannotator/opencode@0.28.16.
See all versions of @plannotator/opencode for other recorded verdicts.
- Review the evidence and your use of @plannotator/opencode@0.28.16 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.