registry / ocmm / 0.4.3

ocmm@0.4.3

OpenCode Multi-Model Auto-Router plugin (ocmm). Per-agent model selection, variant -> param translation, intent-keyword mode injection.

Static Scan Results

scanned 12d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 8 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemShell

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 65 file(s), 430 KB of source, external domains: mcp.context7.com, mcp.exa.ai, mcp.grep.app, mcp.tavily.com, opencode.ai

2 flagged

plugins/deepwork/skills/ast-grep/install.shView file

•path = plugins/deepwork/skills/ast-grep/install.sh kind = build_helper sizeBytes = 7582 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

plugins/deepwork/skills/ast-grep/install.shView on unpkg

plugins/deepwork/skills/ast-grep/tests/smoke.ps1View file

•path = plugins/deepwork/skills/ast-grep/tests/smoke.ps1 kind = payload_in_excluded_dir sizeBytes = 5566 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

plugins/deepwork/skills/ast-grep/tests/smoke.ps1View on unpkg

2 flagged · loading source

plugins/deepwork/skills/ast-grep/install.shView file

•