registry / @tera-system/core / 0.2.3

@tera-system/core@0.2.3

⚠ Under review

Tera System OpenCode Plugin â€” governance core, 20 agents, 11 commands, distribution tools (personal edition)

Static Scan Results

scanned 5h ago · by rust-scanner

Static analysis flagged 11 finding(s) at 86.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

High-risk behavior combination matched malicious policy.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 14 file(s), 35.2 KB of source, external domains: www.w3.org

Source & flagged code

4 flagged

package.jsonView file

Lines 8-42json

8 "node": ">=18"

9 },

10 "files": [

11 "agents",

12 "commands",

13 "core",

14 "tools",

15 "scripts",

16 "MANIFEST.json",

17 "opencode.tera.example.json",

18 "WELCOME.md",

19 "README.md",

20 "LICENSE.md",

21 "RELEASES.md"

22 ],

23 "bin": {

24 "tera-restore": "scripts/install.js",

25 "tera-core-restore": "scripts/install.js"

26 },

27 "scripts": {

28 "postinstall": "node scripts/install.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L28

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L28

29 },

30 "keywords": [

31 "opencode",

32 "plugin",

33 "tera",

34 "governance",

35 "agents",

36 "component"

37 ],

38 "publishConfig": {

39 "access": "public"

40 }

41}

scripts/install.jsView file

Lines 1-30javascript

1#!/usr/bin/env node

2/**

3 * @tera/core installer

4 * --------------------------------------------------------------

5 * NON-DESTRUCTIVE + OWNERSHIP-AWARE installer for the Tera System

6 * OpenCode Plugin component.

7 *

8 * Rules:

9 * - Never deletes anything.

10 * - Never overwrites a file it does not own.

11 * - Tracks ownership via `.opencode/tera-core.manifest.json`.

12 * - Only updates files it owns, always keeping a backup first.

13 * - Idempotent: re-running is safe; identical files are skipped.

14 * - Never touches an existing user `opencode.json`.

15 *

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/install.jsView on unpkg · L10

16 * Target resolution (first match wins):

17 * 1. `--target <dir>` argument

18 * 2. `TERA_TARGET_DIR` environment variable

19 * 3. `INIT_CWD` (set by npm for lifecycle scripts)

20 * 4. current working directory

21 */

22import { createHash } from "node:crypto";

23import fs from "node:fs";

24import path from "node:path";

25import { fileURLToPath } from "node:url";

26import { assessLicenseState, readLicenseState, writeLicenseState } from "./lib/license.mjs";

28const __dirname = path.dirname(fileURLToPath(import.meta.url));

29const PKG_ROOT = path.resolve(__dirname, "..");

30const MANIFEST_NAME = "tera-core.manifest.json";

tools/tera-fetch.ps1View file

•path = tools/tera-fetch.ps1 kind = build_helper sizeBytes = 6816 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

tools/tera-fetch.ps1View on unpkg

Source & flagged code

4 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/install.jsView file

10* - Never overwrites a file it does not own. L11: * - Tracks ownership via `.opencode/tera-core.manifest.json`. L12: * - Only updates files it owns, always keeping a backup first. L13: * - Idempotent: re-running is safe; identical files are skipped. L14: * - Never touches an existing user `opencode.json`. L15: * ... L65: function copyFile(src, dest) { L66: fs.mkdirSync(path.dirname(dest), { recursive: true }); L67: fs.copyFileSync(src, dest); L68: } ... L70: function loadOwnership(target) { L71: const p = path.join(target, ".opencode", MANIFEST_NAME);

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/install.jsView on unpkg · L10

tools/tera-fetch.ps1View file

•path = tools/tera-fetch.ps1 kind = build_helper sizeBytes = 6816 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

tools/tera-fetch.ps1View on unpkg

Findings

1 Critical1 High4 Medium5 Low

CriticalAi Agent Control Hijackscripts/install.js

HighInstall Time Lifecycle Scriptspackage.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumEnvironment Vars

MediumShips Build Helpertools/tera-fetch.ps1

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

LowNo License