registry / oh-my-opencode / 4.14.1

oh-my-opencode@4.14.1

The Best AI Agent Harness - Batteries-Included OpenCode Plugin with Multi-Model Orchestration, Parallel Background Agents, and Crafted LSP/AST Tools

AI Security Review

scanned 5d ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. No confirmed malicious attack surface from npm install. Residual risk is a powerful, user-invoked Codex/OpenCode extension installer that enables hooks, MCP servers, agents, and autonomous Codex permissions.

Static reason

One or more suspicious static signals were detected.

Trigger

npm postinstall for cache/version check; explicit lazycodex/lazycodex-ai CLI install/update for Codex setup

Impact

Can alter Codex behavior and permissions after explicit install; npm postinstall only invalidates package cache and checks binary/version.

Mechanism

agent platform extension installer and hook/MCP registration

Policy narrative

The package is an AI agent extension platform. Its npm postinstall performs package-aligned cache invalidation and binary/version checks, while broader Codex config, hook, MCP, agent, and permission changes occur through an explicit lazycodex installer flow. That creates meaningful agent-control risk but not unconsented install-time hijack or malware behavior under the stated policy.

Rationale

Static inspection found guarded, package-aligned AI-agent extension setup and powerful user-invoked Codex configuration changes, but not unconsented lifecycle mutation of a foreign agent surface, credential theft, destructive behavior, or exfiltration. Warn is appropriate for extension lifecycle/capability risk rather than publish block.

Evidence

package.jsonpostinstall.mjsbin/oh-my-opencode.jspackages/omo-codex/scripts/install-local.mjspackages/omo-codex/scripts/install-dist/install-local.mjspackages/omo-codex/plugin/.codex-plugin/plugin.jsonpackages/omo-codex/plugin/.mcp.jsonpackages/omo-codex/plugin/hooks/post-tool-use-checking-lsp-diagnostics.json~/.cache/opencode/*oh-my-opencode@*~/.cache/opencode/packages/*oh-my-opencode@*~/.codex/config.toml~/.codex/plugins/cache/sisyphuslabs/omo/4.14.1~/.codex/agents/*.toml

Network endpoints3

us.i.posthog.commcp.grep.appmcp.context7.com/mcp

Decision evidence

public snapshot

AI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

package.json has postinstall node postinstall.mjs lifecycle hook.
postinstall.mjs executes opencode --version and removes matching ~/.cache/opencode package cache entries.
packages/omo-codex/scripts/install-dist/install-local.mjs user-invoked installer writes ~/.codex/config.toml, plugins/cache, agents, and hook trust state.
installer enables plugins/plugin_hooks/multi_agent and autonomous permissions via approval_policy="never" in Codex config.
packages/omo-codex/plugin/.codex-plugin/plugin.json declares Codex plugin hooks and MCP servers.
packages/omo-codex/plugin/.mcp.json includes remote MCP URLs https://mcp.grep.app and https://mcp.context7.com/mcp.

Evidence against

No evidence postinstall writes Codex/Claude/MCP control-surface config or plants agent instructions.
Codex installer is reached by explicit lazycodex/lazycodex-ai update/install CLI flow, not npm install import-time execution.
Plugin payload is package-aligned and installed under ~/.codex/plugins/cache/sisyphuslabs/omo plus ~/.codex/agents.
Network endpoints are documented telemetry/MCP/plugin functionality, not credential exfiltration.
bin/oh-my-opencode.js only dispatches to platform binary or explicit installer commands.
No credential harvesting, destructive filesystem behavior, or remote code download observed in inspected source.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell

Supply chain

HighEntropyStringsTelemetryUrlStrings

ManifestNo manifest risk signals triggered.

scanned 384 file(s), 6.33 MB of source, external domains: 127.0.0.1, api.github.com, biomejs.dev, bun.sh, clangd.llvm.org, cli.github.com, clojure-lsp.io, deno.land, eu-assets.i.posthog.com, eu.i.posthog.com, github.com, gleam.run, json-schema.org, mcp.context7.com, models.dev, nodejs.org, posthog.com, registry.npmjs.org, sentry.io, us-assets.i.posthog.com, us.i.posthog.com, yandex.com, your-server.example.com

Oversized source lightweight scan

dist/cli/index.js2.85 MB file, sampled 256 KB

FilesystemNetworkChildProcessEnvironmentVarsCryptoShellHighEntropyStringsTelemetryUrlStrings127.0.0.1cli.github.comgithub.comyour-server.example.com

dist/cli-node/index.js2.80 MB file, sampled 256 KB

FilesystemNetworkChildProcessEnvironmentVarsCryptoShellHighEntropyStringsTelemetryUrlStrings127.0.0.1github.comyour-server.example.com

dist/index.js5.18 MB file, sampled 256 KB

FilesystemNetworkChildProcessEnvironmentVarsHighEntropyStringsTelemetryUrlStringsposthog.comsentry.ious.i.posthog.com

Source & flagged code

13 flagged

package.jsonView file

Lines 95-135json

95 "./tui": "./dist/tui.js",

96 "./schema.json": "./dist/oh-my-opencode.schema.json"

97 },

98 "scripts": {

99 "build": "bun run build:git-bash-mcp && bun run build:lsp-tools-mcp && bun run build:lsp-daemon && bun run build:codex-plugin && bun build packages/omo-opencode/src/index.ts --outdir dist --target bun --format esm --external zod && bun build packages/omo-opencode/src/tui.ts --outdir dist --target bun --format esm --external @opentui/core --external @opentui/keymap --external @opentui/solid && bun run build:shared-skills-assets && bun run build:node-require-shim && tsc --emitDeclarationOnly && bun build packages/omo-opencode/src/cli/index.ts --outdir dist/cli --target bun --format esm && bu ...

100 "build:cli-node": "bun run script/build-cli-node.ts",

101 "build:codex-install": "bun run script/build-codex-install.ts",

102 "build:codex-plugin": "npm --prefix packages/omo-codex/plugin ci && bun run --cwd packages/omo-codex/plugin build",

103 "build:materialize-frontend": "node packages/omo-codex/plugin/scripts/materialize-shared-upstreams.mjs --strict",

104 "build:shared-skills-assets": "bun run build:materialize-frontend && rm -rf dist/skills && cp -R packages/shared-skills/skills dist/skills",

105 "build:lsp-tools-mcp": "npm --prefix packages/lsp-tools-mcp ci && npm --prefix packages/lsp-tools-mcp run build",

106 "build:lsp-daemon": "npm --prefix packages/lsp-daemon ci && npm --prefix packages/lsp-daemon run build",

107 "build:node-require-shim": "bun run script/patch-node-require-shim.ts",

108 "build:all": "bun run build && bun run build:binaries",

109 "build:binaries": "bun run script/build-binaries.ts",

110 "build:schema": "bun run script/build-schema.ts",

111 "build:model-capabilities": "bun run script/build-model-capabilities.ts",

112 "clean": "rm -rf dist",

113 "prepack": "bun run build:materialize-frontend",

114 "prepare": "bun run build",

115 "postinstall": "node postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L115

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L115

116 "prepublishOnly": "bun run clean && bun run build:lsp-tools-mcp && bun run build:lsp-daemon && bun run build",

117 "test:model-capabilities": "bun test packages/model-core/src/model-capability-aliases.test.ts packages/model-core/src/model-capability-guardrails.test.ts packages/model-core/src/model-capabilities.test.ts packages/omo-opencode/src/cli/doctor/checks/model-resolution.test.ts --bail",

118 "typecheck": "tsgo --noEmit && bun run typecheck:script && bun run typecheck:packages",

119 "typecheck:packages": "tsgo --noEmit -p packages/rules-engine/tsconfig.json && tsgo --noEmit -p packages/delegate-core/tsconfig.json && tsgo --noEmit -p packages/mcp-stdio-core/tsconfig.json && tsgo --noEmit -p packages/mcp-client-core/tsconfig.json &&

120 "typecheck:script": "tsgo --noEmit -p script/tsconfig.json",

121 "test": "bun test",

122 "test:codex": "bun run build:codex-install && bun run build:git-bash-mcp && bun run build:lsp-tools-mcp && bun run build:lsp-daemon && npm --prefix packages/lsp-tools-mcp test && npm --prefix packages/omo-codex/plugin ci && bun run --cwd packages/omo-codex/plugin build && npm --prefix packages/omo-codex/plugin/components/codegraph run typecheck && npm --prefix packages/omo-codex/plugin/components/codegraph test && node scripts/check-third-party-notices.mjs --ship && bun test packages/omo-opencode/src/cli/cli-installer.platform.test.ts packages/omo-codex/src/install/codex-cache.test.ts pack ...

123 "test:windows-codex": "bun run test:codex",

124 "build:git-bash-mcp": "bun run --cwd packages/git-bash-mcp build"

125 },

126 "keywords": [

127 "opencode",

128 "plugin",

129 "oracle",

130 "librarian",

131 "agents",

132 "ai",

133 "llm"

134 ],

135 "author": "YeonGyu-Kim",

Long lines were clipped for display.

bin/oh-my-opencode.jsView file

Lines 1-36javascript

1#!/usr/bin/env node

2// bin/oh-my-opencode.js

3// Wrapper script that detects platform and spawns the correct binary

5import { spawnSync } from "node:child_process";

6import { existsSync, readFileSync } from "node:fs";

High

Child Process

Package source references child process execution.

bin/oh-my-opencode.jsView on unpkg · L4

7import { createRequire } from

dist/tui.jsView file

4254import { promisify as promisify2 } from "util"; L4255: var execAsync; L4256: var init_execute_command = __esm(() => {

High

Shell

Package source references shell execution.

dist/tui.jsView on unpkg · L4254

189var init_js_yaml = __esm(() => { L190: /*! js-yaml 4.2.0 https://github.com/nodeca/js-yaml @license MIT */ L191: __create2 = Object.create; ... L619: for (;index < max; index++) { L620: if (!isHexCode(data.charCodeAt(index))) L621: return false; ... L3907: const osProvider = options.osProvider ?? os; L3908: const env = options.env ?? process.env; L3909: const preferredDir = env.XDG_DATA_HOME ?? path.join(osProvider.homedir(), ".local", "share"); L3910: return resolveWritableDirectory(preferredDir, `${appName}-data`, osProvider); ... L4214: // [redacted].ts L4215: import { execFile } from "child_process";

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/tui.jsView on unpkg · L189

postinstall.mjsView file

Lines 60-100javascript

60 const result = require("child_process").execSync("opencode --version", {

61 encoding: "utf-8",

62 stdio: ["pipe", "pipe", "ignore"],

63 });

64 const version = result.

packages/omo-codex/scripts/install-local-entrypoint.test.mjsView file

64// when L65: const output = execFileSync( L66: process.execPath, ... L71: // then L72: assert.equal(output, "npx --yes oh-my-openagent@latest install --platform=codex --no-tui --codex-autonomous"); L73: });

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

packages/omo-codex/scripts/install-local-entrypoint.test.mjsView on unpkg · L64

dist/skills/ast-grep/install.shView file

•path = dist/skills/ast-grep/install.sh kind = build_helper sizeBytes = 7581 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/skills/ast-grep/install.shView on unpkg

dist/skills/ast-grep/tests/smoke.ps1View file

•path = dist/skills/ast-grep/tests/smoke.ps1 kind = payload_in_excluded_dir sizeBytes = 5701 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

dist/skills/ast-grep/tests/smoke.ps1View on unpkg

dist/cli-node/index.jsView file

•path = dist/cli-node/index.js kind = oversized_source_file sizeBytes = 2940755 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/cli-node/index.jsView on unpkg

•path = dist/cli-node/index.js kind = oversized_cli_entrypoint sizeBytes = 2940755 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/cli-node/index.jsView on unpkg

Source & flagged code

13 flagged · loading source

package.jsonView file

•scripts.postinstall = node postinstall.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node postinstall.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

bin/oh-my-opencode.jsView file

4L5: import { spawnSync } from "node:child_process"; L6: import { existsSync, readFileSync } from "node:fs";

High

Child Process

Package source references child process execution.

bin/oh-my-opencode.jsView on unpkg · L4

4Cross-file remote execution chain: bin/oh-my-opencode.js spawns packages/omo-codex/scripts/install-dist/install-local.mjs; helper contains network access plus dynamic code execution. L4: L5: import { spawnSync } from "node:child_process"; L6: import { existsSync, readFileSync } from "node:fs"; ... L23: function getLibcFamily() { L24: if (process.platform !== "linux") { L25: return undefined; // Not needed on non-Linux ... L41: L42: if (process.env.OH_MY_OPENCODE_FORCE_BASELINE === "1") { L43: return false; ... L63: L64: return probe.stdout.toUpperCase().includes("AVX2"); L65: }

High

Cross File Remote Execution Context

Source spawns a local helper that also contains network and dynamic execution context; review data flow before blocking.

bin/oh-my-opencode.jsView on unpkg · L4

16L17: const require = createRequire(import.meta.url); L18:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bin/oh-my-opencode.jsView on unpkg · L16

dist/tui.jsView file

4254import { promisify as promisify2 } from "util"; L4255: var execAsync; L4256: var init_execute_command = __esm(() => {

High

Shell

Package source references shell execution.

dist/tui.jsView on unpkg · L4254

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/tui.jsView on unpkg · L189

postinstall.mjsView file

80package = oh-my-opencode; repositoryIdentity = oh-my-openagent; dependency = detect-libc L80: try { L81: const detectLibc = require("detect-libc"); L82: return detectLibc.familySync();

High

Copied Package Dependency Bridge

Package metadata claims a different repository identity while copied source loads a runtime dependency bridge.

postinstall.mjsView on unpkg · L80

packages/omo-codex/scripts/install-local-entrypoint.test.mjsView file

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

packages/omo-codex/scripts/install-local-entrypoint.test.mjsView on unpkg · L64

dist/skills/ast-grep/install.shView file

•path = dist/skills/ast-grep/install.sh kind = build_helper sizeBytes = 7581 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/skills/ast-grep/install.shView on unpkg

dist/skills/ast-grep/tests/smoke.ps1View file

•path = dist/skills/ast-grep/tests/smoke.ps1 kind = payload_in_excluded_dir sizeBytes = 5701 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

dist/skills/ast-grep/tests/smoke.ps1View on unpkg

dist/cli-node/index.jsView file

•path = dist/cli-node/index.js kind = oversized_source_file sizeBytes = 2940755 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/cli-node/index.jsView on unpkg

•path = dist/cli-node/index.js kind = oversized_cli_entrypoint sizeBytes = 2940755 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/cli-node/index.jsView on unpkg

Findings

8 High7 Medium7 Low

HighInstall Time Lifecycle Scriptspackage.json

HighChild Processbin/oh-my-opencode.js

HighShelldist/tui.js

HighCopied Package Dependency Bridgepostinstall.mjs

HighCross File Remote Execution Contextbin/oh-my-opencode.js

HighRuntime Package Installpackages/omo-codex/scripts/install-local-entrypoint.test.mjs

HighPayload In Excluded Dirdist/skills/ast-grep/tests/smoke.ps1

HighOversized Source Filedist/cli-node/index.js

MediumAmbiguous Install Lifecycle Scriptpackage.json

MediumDynamic Requirebin/oh-my-opencode.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperdist/skills/ast-grep/install.sh

MediumOversized Cli Entrypointdist/cli-node/index.js

MediumStructural Risk Force Deep Review

LowNon Install Lifecycle Scripts

LowScripts Present

LowWeak Cryptodist/tui.js

LowFilesystem

LowHigh Entropy Strings

LowTelemetry

LowUrl Strings

86%Warn

Verdict confidence

IntentDangerous Capability

TypeAgent extension lifecycle risk

False-positive riskMedium

Review stagesource_first_review

Firewall policyWarn-only agent extension risk

Package metadata

npm

AuthorYeonGyu-Kim

Maintainerscode-yeongyu

Version4.16.2

PublishedJun 30, 2026

LicenseSUL-1.0

Dependencies30

Integrityverified

Package size6.14 MB

Files3,854

Keywordsopencodepluginoraclelibrarianagentsaillm

LinksRepository Homepage Issues

Runtime surface

package.json

Entrypointsmain → ./dist/index.jstypes → dist/index.d.tsexports mapbin → lazycodex, lazycodex-ai, oh-my-openagent +2

RuntimeNo engine / OS / CPU constraints

Artifact32.7 MB · 3,854 files1 signature(s) · provenance

Install lifecyclepostinstallprepareprepublishOnly

Behavioral surface

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShellHighEntropyStringsTelemetryUrlStringsManifest: clean

Source & flagged code

13 flagged

package.jsonView file

Lines 95-135json

95 "./tui": "./dist/tui.js",

96 "./schema.json": "./dist/oh-my-opencode.schema.json"

97 },

98 "scripts": {

100 "build:cli-node": "bun run script/build-cli-node.ts",

101 "build:codex-install": "bun run script/build-codex-install.ts",

102 "build:codex-plugin": "npm --prefix packages/omo-codex/plugin ci && bun run --cwd packages/omo-codex/plugin build",

103 "build:materialize-frontend": "node packages/omo-codex/plugin/scripts/materialize-shared-upstreams.mjs --strict",

104 "build:shared-skills-assets": "bun run build:materialize-frontend && rm -rf dist/skills && cp -R packages/shared-skills/skills dist/skills",

105 "build:lsp-tools-mcp": "npm --prefix packages/lsp-tools-mcp ci && npm --prefix packages/lsp-tools-mcp run build",

106 "build:lsp-daemon": "npm --prefix packages/lsp-daemon ci && npm --prefix packages/lsp-daemon run build",

107 "build:node-require-shim": "bun run script/patch-node-require-shim.ts",

108 "build:all": "bun run build && bun run build:binaries",

109 "build:binaries": "bun run script/build-binaries.ts",

110 "build:schema": "bun run script/build-schema.ts",

111 "build:model-capabilities": "bun run script/build-model-capabilities.ts",

112 "clean": "rm -rf dist",

113 "prepack": "bun run build:materialize-frontend",

114 "prepare": "bun run build",

115 "postinstall": "node postinstall.mjs",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L115

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L115

116 "prepublishOnly": "bun run clean && bun run build:lsp-tools-mcp && bun run build:lsp-daemon && bun run build",

118 "typecheck": "tsgo --noEmit && bun run typecheck:script && bun run typecheck:packages",

120 "typecheck:script": "tsgo --noEmit -p script/tsconfig.json",

121 "test": "bun test",

123 "test:windows-codex": "bun run test:codex",

124 "build:git-bash-mcp": "bun run --cwd packages/git-bash-mcp build"

125 },

126 "keywords": [

127 "opencode",

128 "plugin",

129 "oracle",

130 "librarian",

131 "agents",

132 "ai",

133 "llm"

134 ],

135 "author": "YeonGyu-Kim",

Long lines were clipped for display.

bin/oh-my-opencode.jsView file

Lines 1-36javascript

1#!/usr/bin/env node

2// bin/oh-my-opencode.js

3// Wrapper script that detects platform and spawns the correct binary

5import { spawnSync } from "node:child_process";

6import { existsSync, readFileSync } from "node:fs";

High

Child Process

Package source references child process execution.

bin/oh-my-opencode.jsView on unpkg · L4

7import { createRequire } from

dist/tui.jsView file

4254import { promisify as promisify2 } from "util"; L4255: var execAsync; L4256: var init_execute_command = __esm(() => {

High

Shell

Package source references shell execution.

dist/tui.jsView on unpkg · L4254

Low

Weak Crypto

Package source references weak cryptographic algorithms.

dist/tui.jsView on unpkg · L189

postinstall.mjsView file

Lines 60-100javascript

60 const result = require("child_process").execSync("opencode --version", {

61 encoding: "utf-8",

62 stdio: ["pipe", "pipe", "ignore"],

63 });

64 const version = result.

packages/omo-codex/scripts/install-local-entrypoint.test.mjsView file

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

packages/omo-codex/scripts/install-local-entrypoint.test.mjsView on unpkg · L64

dist/skills/ast-grep/install.shView file

•path = dist/skills/ast-grep/install.sh kind = build_helper sizeBytes = 7581 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

dist/skills/ast-grep/install.shView on unpkg

dist/skills/ast-grep/tests/smoke.ps1View file

•path = dist/skills/ast-grep/tests/smoke.ps1 kind = payload_in_excluded_dir sizeBytes = 5701 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

dist/skills/ast-grep/tests/smoke.ps1View on unpkg

dist/cli-node/index.jsView file

•path = dist/cli-node/index.js kind = oversized_source_file sizeBytes = 2940755 magicHex = [redacted]

High

Oversized Source File

Package contains source files above the static scanner size ceiling.

dist/cli-node/index.jsView on unpkg

•path = dist/cli-node/index.js kind = oversized_cli_entrypoint sizeBytes = 2940755 magicHex = [redacted]

Medium

Oversized Cli Entrypoint

Package contains an oversized executable-looking CLI entrypoint.

dist/cli-node/index.jsView on unpkg