registry / @plannotator/opencode / 0.28.30
@plannotator/opencode@0.28.30
Plannotator plugin for OpenCode - interactive plan review with visual annotation
AI Security Review
scanned 12d ago · by lpm-firewall-aiThe lifecycle hook performs automatic setup in the user's OpenCode configuration, so this warrants a warning for agent extension lifecycle risk. The inspected behavior copies package-owned assets and does not establish a malicious attack.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Trigger
A package manager runs the package's postinstall hook after installation under node_modules.
Impact
The package adds or overwrites files loaded by the user's OpenCode setup.
Mechanism
The script copies command files and a skill into the OpenCode configuration directory, using XDG_CONFIG_HOME or the user's .config directory by default.
AI rationale
The lifecycle hook performs automatic setup in the user's OpenCode configuration, so this warrants a warning for agent extension lifecycle risk. The inspected behavior copies package-owned assets and does not establish a malicious attack.
Evidence
package.jsonscripts/postinstall.cjs${XDG_CONFIG_HOME:-~/.config}/opencode/commands/*.md${XDG_CONFIG_HOME:-~/.config}/opencode/skills/plannotator/SKILL.md
Decision evidence
public snapshotAI called this Suspicious at 89.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package runs a postinstall script during installation.
- The script can copy package-owned command files and a skill into the user's OpenCode configuration directory.
- The copy runs for packages under node_modules unless explicitly disabled; this creates a real, automatic agent extension setup surface.
Evidence against
- The script skips workspace packages by default and supports an environment variable to disable copying.
- The inspected source shows copying of command and skill files, with no network transfer in this install path.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket
HighEntropyStringsMinifiedTelemetryUrlStrings
Source & flagged code
5 flaggedpackage.jsonView file
•scripts.postinstall = node scripts/postinstall.cjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/postinstall.cjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgdiagram-engine/engine.jsView file
1function ic(e,t){for(var n=0;n<t.length;n++){const r=t[n];if(typeof r!="string"&&!Array.isArray(r)){for(const o in r)if(o!=="default"&&!(o in e)){const s=Object.getOwnPropertyDescr...
L2: `);let n=t.length;for(;n>0&&(t[n-1]??"").trim()==="";)n-=1;let r=1;for(;r<=n&&(t[r-1]??"").trim()==="";)r+=1;return n===0||r>n?null:[r,n]}function vc(e){for(const t of e.split(`
Medium
Findings
2 High6 Medium7 Low
HighInstall Time Lifecycle Scriptspackage.json
HighPrevious Version Dangerous Deltadist/server.js
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumDynamic Requirediagram-engine/engine.js
MediumNetwork
MediumEnvironment Vars
MediumOversized Source Filediagram-engine/mermaid.js
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowEval
LowFilesystem
LowHigh Entropy Strings
LowTelemetry
LowUrl Strings
Affected versions and remediation
This report applies to @plannotator/opencode@0.28.30.
See all versions of @plannotator/opencode for other recorded verdicts.
- Review the evidence and your use of @plannotator/opencode@0.28.30 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.