registry / makdoong2-team / 1.7.0
makdoong2-team@1.7.0
내 일을 대신해주는 막둥이들. Self-contained opencode plugin for 사내 workflow: per-stage specialist agents, deterministic shell gates, primary-only enforcement, and a model fallback advisor.
AI Security Review
scanned 6d ago · by lpm-firewall-aiThe lifecycle hook automatically installs package-owned OpenCode extensions on global installs, creating an agent extension lifecycle risk. Source inspection did not establish a concrete malicious attack, so this warrants a warning rather than a publish block.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Installing globally with npm, or setting the package's explicit auto-install opt-in.
Impact
The package's extensions become available to OpenCode after setup, including a helper agent with broad shell permissions.
Mechanism
The postinstall hook invokes the installer, which copies package-owned agent and skill files and patches OpenCode configuration to register the plugin and enable its tools.
AI rationale
The lifecycle hook automatically installs package-owned OpenCode extensions on global installs, creating an agent extension lifecycle risk. Source inspection did not establish a concrete malicious attack, so this warrants a warning rather than a publish block.
Evidence
package.jsonpostinstall.mjsscripts/install-lib.mjsagents/makdoong2-issue-reporter.mdagents/skills/opencode.json
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- The manifest defines an npm postinstall hook that runs the package installer.
- The hook skips local installs and CI unless explicitly opted in; global installs pass its gate.
- When the gate passes, the hook deploys the package to the default OpenCode configuration directory.
- The installer copies this package's agent definitions and skills into OpenCode configuration.
- The installer registers this plugin and enables its custom tools in OpenCode configuration.
- One installed package-owned helper agent permits broad shell actions.
Evidence against
- The automatic setup is limited to global installs or an explicit opt-in; local installs and CI otherwise skip it.
- The inspected setup installs this package's own OpenCode components; it does not establish a hostile recipient or broad mutation of unrelated agents.
Behavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemShell
Source & flagged code
7 flagged · loading sourcepackage.jsonView file
•scripts.postinstall = node postinstall.mjs
High
Install Time Lifecycle Scripts
Package defines install-time lifecycle scripts.
package.jsonView on unpkg•scripts.postinstall = node postinstall.mjs
Medium
Ambiguous Install Lifecycle Script
Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgbin/cli.jsView file
16import { dirname, join, resolve } from "node:path";
L17: import { execFileSync } from "node:child_process";
L18: import {
High
3
Findings
1 Critical5 High4 Medium5 Low
CriticalAi Agent Control Hijackscripts/install-lib.mjs
HighInstall Time Lifecycle Scriptspackage.json
HighChild Processbin/cli.js
HighShell
HighRuntime Package Installbin/cli.js
HighSemantic Analysis Limitedassets/makdoong2-team.schema.json
MediumAmbiguous Install Lifecycle Scriptpackage.json
MediumEnvironment Vars
MediumShips Build Helpergates/stage6-post-commit-verify.sh
MediumStructural Risk Force Deep Review
LowNon Install Lifecycle Scripts
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
Affected versions and remediation
This report applies to makdoong2-team@1.7.0.
See all versions of makdoong2-team for other recorded verdicts.
- Review the evidence and your use of makdoong2-team@1.7.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.