registry / commandmate / 0.10.4

commandmate@0.10.4

A local control plane for agent CLIs — orchestration and visibility for Claude Code, Codex, Gemini CLI, and more across Git worktrees

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs CommandMate, starts a server/session, and selects an OpenCode worktree session.

Impact

Can control prompts sent to user-selected local agent sessions and add a new worktree-local OpenCode config; existing config is not overwritten.

Mechanism

Launches local agent CLIs via tmux and conditionally creates a worktree-local OpenCode provider configuration.

Rationale

The package is not malicious by the inspected source, but its explicit agent orchestration and conditional worktree configuration write are a dangerous dual-use capability that merits a warning under the stated policy.

Evidence

package.jsonbin/commandmate.jsdist/cli/index.jsdist/cli/utils/daemon.jsdist/server/src/lib/cli-tools/opencode.jsdist/server/src/lib/cli-tools/opencode-config.js.next/server/app/apple-icon.png.body

Network endpoints2

localhost:11434/api/tagslocalhost:1234/v1/models

commandmate@0.10.4

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code