registry / litopencode / 0.1.47

litopencode@0.1.47

LitOpenCode OpenCode plugin bootstrap package.

AI Security Review

scanned 3h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. Explicit installation registers LitOpenCode as an OpenCode plugin and provisions package-managed configuration, commands, and skills. No npm install-time execution is present.

Static reason

No blocking static signals were detected.; previous stored version diff introduced dangerous source

Trigger

User runs `litopencode install` or `npx litopencode install`.

Impact

Changes the selected OpenCode root and invokes the local `opencode` CLI globally; this is a package-owned extension lifecycle action.

Mechanism

Explicit OpenCode extension registration and managed-skill provisioning.

Rationale

The package is not malicious by source evidence, but it has an explicit agent-extension installer that mutates an AI-agent control surface. Per policy, this warrants a non-blocking warning rather than a publish block.

Evidence

package.jsonbin/litopencode.cjsdist/cli/install.jsdist/cli/install-config.jsdist/cli/plugin-mutation.jsdist/cli/native-skill-install.jsdist/public-source-fetch.js<OpenCode root>/opencode.json[c]<OpenCode root>/litopencode.json<OpenCode root>/command<OpenCode root>/skills

litopencode@0.1.47

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code