registry / @tera-system/core / 0.5.0
@tera-system/core@0.5.0
Tera System OpenCode Plugin — governance core, 25 agents, 37 commands, distribution tools (personal edition)
AI Security Review
scanned 26d ago · by lpm-firewall-aiThe automatic first-party agent-extension setup is a lifecycle risk that warrants a warning. Static inspection found no concrete malicious behavior.
Static reason
High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review
Trigger
npm postinstall.
Impact
This changes the available AI-agent extension surface of the target workspace; existing differing configuration is retained.
Mechanism
The installer copies package agents, commands, and configuration into .opencode under the installation target.
AI rationale
The automatic first-party agent-extension setup is a lifecycle risk that warrants a warning. Static inspection found no concrete malicious behavior.
Evidence
package.jsonscripts/install.js.opencode/agents.opencode/commands.opencode/opencode.json.opencode/tera-core.manifest.json
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The package automatically runs its installer after npm installation.
- The installer creates an OpenCode configuration when one is absent and installs package-provided agents and commands into the target workspace.
- Existing different OpenCode configuration is detected rather than overwritten.
Evidence against
- No credential collection, exfiltration, remote payload loading, self-dependency, or destructive action was identified in the inspected entrypoints.
- The bundled Structurizr client sends requests only when its separately invoked MCP tool is called.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
8 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node scripts/install.js
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node scripts/install.js
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgscripts/install.jsView file
10* - Never overwrites a file it does not own.
L11: * - Tracks ownership via `.opencode/tera-core.manifest.json`.
L12: * - Only updates files it owns, always keeping a backup first.
L13: * - Idempotent: re-running is safe; identical files are skipped.
L14: * - Never touches an existing user `opencode.json`.
L15: *
...
L65: function copyFile(src, dest) {
L66: fs.mkdirSync(path.dirname(dest), { recursive: true });
L67: fs.copyFileSync(src, dest);
L68: }
...
L70: function loadOwnership(target) {
L71: const p = path.join(target, ".opencode", MANIFEST_NAME);
Findings
1 Critical3 High5 Medium6 Low
CriticalAi Agent Control Hijackscripts/install.js
HighInstall Time Lifecycle Scriptspackage.json
HighShips High Entropy Blobassets/project-control/TeraPricingCalculator.xlsx
HighKnown Malware Source Similarityscripts/build.mjs
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumEnvironment Vars
MediumShips Build Helpertools/tera-fetch.ps1
MediumShips Compressed Blobassets/project-control/TeraPricingCalculator.xlsx
MediumStructural Risk Force Deep Review
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @tera-system/core@0.5.0.
See all versions of @tera-system/core for other recorded verdicts.
- Review the evidence and your use of @tera-system/core@0.5.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.