registry / @tera-system/core / 0.2.20
@tera-system/core@0.2.20
Tera System OpenCode Plugin ط£آ¢أ¢â€ڑآ¬أ¢â‚¬â€Œ governance core, 20 agents, 11 commands, distribution tools (personal edition)
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThis is a real automated AI-agent extension setup with enabled unpinned npx channels, but the inspected source is transparent, preserves differing user configuration, and has no exfiltration, destructive behavior, or self-dependency chain. It warrants a warning rather than a publication block.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
npm installation, followed by OpenCode starting the installed MCP configuration
Impact
The package can alter an AI-agent control surface and introduce later remote package execution.
Mechanism
Postinstall deployment of OpenCode agents, commands, and an enabled MCP configuration
AI rationale
This is a real automated AI-agent extension setup with enabled unpinned npx channels, but the inspected source is transparent, preserves differing user configuration, and has no exfiltration, destructive behavior, or self-dependency chain. It warrants a warning rather than a publication block.
Evidence
package.jsonscripts/install.jsopencode.tera.example.json.opencode/agents/.opencode/commands/.opencode/opencode.jsontera-system/tools/project-control/tera-workshop/
Decision evidence
public snapshotAI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The package runs its installer automatically after installation.
- The installer targets the consumer workspace through INIT_CWD and writes OpenCode agent and command files.
- It creates an OpenCode configuration when absent and enables MCP commands that use npx.
- The installed configuration can fetch and execute unpinned MCP packages when OpenCode starts them.
Evidence against
- No runtime dependency on another release of this package is declared.
- The installer preserves a differing existing OpenCode configuration and does not contain network or credential-exfiltration code.
- The build helper is not an install hook and only packages local content.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
8 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/install.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/install.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgscripts/install.jsView file
10* - Never overwrites a file it does not own.
L11: * - Tracks ownership via `.opencode/tera-core.manifest.json`.
L12: * - Only updates files it owns, always keeping a backup first.
L13: * - Idempotent: re-running is safe; identical files are skipped.
L14: * - Never touches an existing user `opencode.json`.
L15: *
...
L65: function copyFile(src, dest) {
L66: fs.mkdirSync(path.dirname(dest), { recursive: true });
L67: fs.copyFileSync(src, dest);
L68: }
...
L70: function loadOwnership(target) {
L71: const p = path.join(target, ".opencode", MANIFEST_NAME);
Findings
1 Critical3 High5 Medium6 Low
CriticalAi Agent Control Hijackscripts/install.js
HighInstall Time Lifecycle Scriptspackage.json
HighShips High Entropy Blobassets/project-control/TeraPricingCalculator.xlsx
HighKnown Malware Source Similarityscripts/build.mjs
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumEnvironment Vars
MediumShips Build Helpertools/tera-fetch.ps1
MediumShips Compressed Blobassets/project-control/TeraPricingCalculator.xlsx
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @tera-system/core@0.2.20.
See all versions of @tera-system/core for other recorded verdicts.
- Review the evidence and your use of @tera-system/core@0.2.20 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.