registry / @tera-system/core / 0.4.0

@tera-system/core@0.4.0

Tera System OpenCode Plugin — governance core, 23 agents, 35 commands, distribution tools (personal edition)

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

The automatic postinstall modifies a consumer AI-agent configuration surface, which warrants a warning under the stated policy. Static inspection found no concrete malicious payload or exfiltration behavior.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

npm postinstall invokes scripts/install.js.

Impact

This is a first-party agent-extension lifecycle mutation of the consumer project; it can alter the local AI-agent control surface without an explicit setup command.

Mechanism

The installer uses INIT_CWD or another target directory and copies package-owned files into .opencode and related project paths, while retaining conflicts.

AI rationale

Evidence

package.jsonscripts/install.js.opencode/agents.opencode/commands.opencode/opencode.json.opencode/tera-core.manifest.json

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

The manifest automatically runs scripts/install.js after installation.
The installer resolves the consumer workspace and copies package agent and command files into its .opencode directory.
The installer preserves conflicting configuration files and records ownership, reducing overwrite risk.

Evidence against

No credential collection, network send operation, dynamic code execution, or self-dependency was found in the inspected manifest and installer.
The spreadsheet is a standard XLSX archive with XML workbook parts; no macro payload was present in its archive listing.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

NoLicense

scanned 13 file(s), 33.9 KB of source, external domains: www.w3.org

Source & flagged code

8 flagged

package.jsonView file

Lines 9-43json

9 },

10 "files": [

11 "agents",

12 "commands",

13 "core",

14 "assets",

15 "tools",

16 "scripts",

17 "MANIFEST.json",

18 "opencode.tera.example.json",

19 "WELCOME.md",

20 "README.md",

21 "LICENSE.md",

22 "RELEASES.md"

23 ],

24 "bin": {

25 "tera-restore": "scripts/install.js",

26 "tera-core-restore": "scripts/install.js"

27 },

28 "scripts": {

29 "postinstall": "node scripts/install.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L29

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L29

30 },

31 "keywords": [

32 "opencode",

33 "plugin",

34 "tera",

35 "governance",

36 "agents",

37 "component"

38 ],

39 "publishConfig": {

40 "access": "public"

41 }

42}

scripts/install.jsView file

Lines 1-30javascript

1#!/usr/bin/env node

2/**

3 * @tera/core installer

4 * --------------------------------------------------------------

5 * NON-DESTRUCTIVE + OWNERSHIP-AWARE installer for the Tera System

6 * OpenCode Plugin component.

7 *

8 * Rules:

9 * - Never deletes anything.

10 * - Never overwrites a file it does not own.

11 * - Tracks ownership via `.opencode/tera-core.manifest.json`.

tools/tera-fetch.ps1View file

•path = tools/tera-fetch.ps1 kind = build_helper sizeBytes = 6816 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

tools/tera-fetch.ps1View on unpkg

assets/project-control/TeraPricingCalculator.xlsxView file

•path = assets/project-control/TeraPricingCalculator.xlsx kind = high_entropy_blob sizeBytes = 21531 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

assets/project-control/TeraPricingCalculator.xlsxView on unpkg

•path = assets/project-control/TeraPricingCalculator.xlsx kind = compressed_blob sizeBytes = 21531 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

assets/project-control/TeraPricingCalculator.xlsxView on unpkg

•path = assets/project-control/TeraPricingCalculator.xlsx kind = nested_archive_needs_inspection sizeBytes = 21531 magicHex = [redacted]

Low

Nested Archive Needs Inspection

Package ships a nested archive or MCP bundle that was inventoried but not recursively analyzed.

assets/project-control/TeraPricingCalculator.xlsxView on unpkg

scripts/build.mjsView file

•matchType = normalized_sha256 matchedPackage = @tera-system/core@0.2.18 matchedPath = scripts/build.mjs matchedIdentity = npm:QHRlcmEtc3lzdGVtL2NvcmU:0.2.18 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

scripts/build.mjsView on unpkg

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/install.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/install.jsView file

10* - Never overwrites a file it does not own. L11: * - Tracks ownership via `.opencode/tera-core.manifest.json`. L12: * - Only updates files it owns, always keeping a backup first. L13: * - Idempotent: re-running is safe; identical files are skipped. L14: * - Never touches an existing user `opencode.json`. L15: * ... L65: function copyFile(src, dest) { L66: fs.mkdirSync(path.dirname(dest), { recursive: true }); L67: fs.copyFileSync(src, dest); L68: } ... L70: function loadOwnership(target) { L71: const p = path.join(target, ".opencode", MANIFEST_NAME);

Findings

1 Critical3 High5 Medium6 Low

CriticalAi Agent Control Hijackscripts/install.js

HighInstall Time Lifecycle Scriptspackage.json

HighShips High Entropy Blobassets/project-control/TeraPricingCalculator.xlsx

HighKnown Malware Source Similarityscripts/build.mjs

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumEnvironment Vars

MediumShips Build Helpertools/tera-fetch.ps1

MediumShips Compressed Blobassets/project-control/TeraPricingCalculator.xlsx

MediumStructural Risk Force Deep Review

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LowUrl Strings

Affected versions and remediation

This report applies to @tera-system/core@0.4.0.

See all versions of @tera-system/core for other recorded verdicts.

Review the evidence and your use of @tera-system/core@0.4.0 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-09-22 02:51:18.336Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Related packages

More from @tera-system

Behavioral surface

Related packages

More from @tera-system

Source & flagged code