registry / makdoong2-team / 1.4.2

makdoong2-team@1.4.2

내 일을 대신해주는 막둥이들. Self-contained opencode plugin for 사내 workflow: per-stage specialist agents, deterministic shell gates, primary-only enforcement, and a model fallback advisor.

AI Security Review

scanned 6d ago · by lpm-firewall-ai

The source shows guarded, package-owned OpenCode extension setup that still mutates user configuration during global installation, plus a Bamboo script that disables TLS verification. This supports a warning for extension lifecycle risk, not a publish block.

Static reason

High-risk behavior combination matched malicious policy.; source matched previously finalized malicious package; routed for review

Trigger

Installing globally with npm activates postinstall; running the Bamboo skill activates the TLS setting.

Impact

The global install changes the OpenCode extension configuration without a separate setup command. Disabling TLS verification weakens protection for the configured Bamboo connection.

Mechanism

The postinstall path adds the package plugin and enables tools and config-directory access. The Bamboo script disables Node TLS verification before invoking its MCP server.

AI rationale

Evidence

package.jsonpostinstall.mjsscripts/install-lib.mjsskills/bamboo-ci/run-bamboo.shopencode.jsonagents/skills/

Decision evidence

public snapshot

AI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The postinstall hook runs for global installs; it skips local installs unless explicitly opted in and skips CI unless opted in.
The installer deploys the package’s agent definitions and adds its plugin, tools, and broad config-directory access entries to OpenCode configuration.
The Bamboo skill disables Node TLS certificate verification before loading the Bamboo endpoint and token from user configuration.

Evidence against

The hook is guarded for local installs and CI, and its deployment uses this package’s own agents and research skills.
The inspected research fan-out module contains source definitions and deterministic query helpers, with no child-process calls found.

Behavioral surface

Source

ChildProcessCryptoEnvironmentVarsFilesystem

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 22 file(s), 368 KB of source, external domains: 127.0.0.1

Source & flagged code

8 flagged

package.jsonView file

Lines 49-86json

49 "license": "MIT",

50 "engines": {

51 "opencode": ">=1.18.0",

52 "node": ">=20.0.0",

53 "tmux": ">=3.0"

54 },

55 "peerDependencies": {

56 "@opencode-ai/plugin": "^1.18.0"

57 },

58 "devDependencies": {

59 "@opencode-ai/plugin": "1.18.15",

60 "@opencode-ai/sdk": "1.18.15",

61 "@types/node": "^22.20.1",

62 "husky": "^9.0.0",

63 "typescript": "^5.7.0"

64 },

65 "scripts": {

66 "build": "tsc -p tsconfig.build.json",

67 "clean": "node -e \"import('node:fs').then(({rmSync})=>rmSync('dist',{recursive:true,force:true}))\"",

68 "prepack": "npm run clean && npm run build",

69 "postinstall": "node postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L69

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L69

70 "prepare": "husky install",

71 "test": "XDG_CONFIG_HOME=\"$(mktemp -d)\" XDG_CACHE_HOME=\"$(mktemp -d)\" npm run test:all",

72 "test:all": "npm run build && node scripts/run-tests.mjs",

73 "test:install": "node test/install-lib.test.mjs",

74 "test:postinstall": "node scripts/test-postinstall.mjs",

75 "test:ubuntu": "bash scripts/test-ubuntu.sh",

76 "release": "bash scripts/release.sh",

77 "release:patch": "bash scripts/release.sh patch",

78 "release:minor": "bash scripts/release.sh minor",

79 "release:major": "bash scripts/release.sh major"

80 },

81 "homepage": "https://github.com/y00njinuk/makdoong2-team#readme",

82 "bugs": {

83 "url": "https://github.com/y00njinuk/makdoong2-team/issues"

84 }

85}

bin/cli.jsView file

Lines 1-36javascript

1#!/usr/bin/env node

2// bin/cli.js — makdoong2-team installer & doctor.

3//

4// npx makdoong2-team install [--config <dir>] [--force]

5// npx makdoong2-team doctor [--config <dir>]

6// npx makdoong2-team --version | --help

7//

8// Replaces the old bash install.sh. Zero runtime dependencies (plain Node ESM)

9// so `npx` runs instantly with nothing to resolve first. Settings are NOT

10// passed as flags — everything is controlled by ~/.config/opencode/makdoong2-team.json.

scripts/install-lib.mjsView file

Lines 1-29javascript

1// scripts/install-lib.mjs — Reusable install logic for CLI and postinstall.

2//

3// Extracted from bin/cli.js doInstall() to enable both:

4// 1) Manual install via `makdoong2-team install` (CLI)

5// 2) Automatic install via `npm install -g` (postinstall.mjs)

6//

7// Single source of truth for deployment logic.

9import {

10 cpSync, mkdirSync, existsSync, readFileSync, writeFileSync, chmodSync, readdirSync, rmSync,

gates/stage6-post-commit-verify.shView file

•path = gates/stage6-post-commit-verify.sh kind = build_helper sizeBytes = 6825 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

gates/stage6-post-commit-verify.shView on unpkg

dist/research-fanout.js#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 2

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

dist/research-fanout.js#virtual:normalized:round1View on unpkg

skills/bamboo-ci/run-bamboo.shView file

•matchType = token_shingles matchedPackage = skillenforce@0.2.2 matchedPath = install/install.sh matchedIdentity = npm:c2tpbGxlbmZvcmNl:0.2.2 similarity = 0.700 shingleOverlap = 14 summary = source token shingles overlapped finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

skills/bamboo-ci/run-bamboo.shView on unpkg

Source & flagged code

8 flagged · loading source

package.jsonView file

•scripts.postinstall = node postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/cli.jsView file

16import { dirname, join, resolve } from "node:path"; L17: import { execFileSync } from "node:child_process"; L18: import {

High

Child Process

Package source references child process execution.

bin/cli.jsView on unpkg · L16

Findings

1 Critical5 High4 Medium5 Low

CriticalAi Agent Control Hijackscripts/install-lib.mjs

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processbin/cli.js

HighRuntime Package Installbin/cli.js

HighSemantic Analysis Limiteddist/research-fanout.js#virtual:normalized:round1

HighKnown Malware Source Similarityskills/bamboo-ci/run-bamboo.sh

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumEnvironment Vars

MediumShips Build Helpergates/stage6-post-commit-verify.sh

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

Low

Affected versions and remediation

This report applies to makdoong2-team@1.4.2.

See all versions of makdoong2-team for other recorded verdicts.

Review the evidence and your use of makdoong2-team@1.4.2 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-17 03:20:24.788Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Runtime surface

Behavioral surface

Source & flagged code