Loading npm security reports…
내 일을 대신해주는 막둥이들. Self-contained opencode plugin for 사내 workflow: per-stage specialist agents, deterministic shell gates, primary-only enforcement, and a model fallback advisor.
LPM treats this as warn-only first-party agent extension lifecycle risk. A global install automatically modifies the user's OpenCode extension configuration. It enables this package's plugin and tools and grants access to the package and OpenCode configuration trees.
Package defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage source invokes a package manager install command at runtime.
bin/cli.tsView on unpkg · L10Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.
scripts/install-lib.mjsView on unpkg · L33Package ships non-JavaScript build or shell helper files.
gates/stage6-post-commit-verify.shView on unpkgA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
assets/makdoong2-team.schema.jsonView on unpkgPackage defines install-time lifecycle scripts.
package.jsonView on unpkg · L71Install-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkg · L71Package ships non-JavaScript build or shell helper files.
gates/stage6-post-commit-verify.shView on unpkgA bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.
assets/makdoong2-team.schema.jsonView on unpkgPackage source invokes a package manager install command at runtime.
bin/cli.tsView on unpkg · L10Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.
scripts/install-lib.mjsView on unpkg · L33