oh-my-opencode@4.19.0
The Best AI Agent Harness - Batteries-Included OpenCode Plugin with Multi-Model Orchestration, Parallel Background Agents, and Crafted LSP/AST Tools
AI Security Review
scanned 3mo ago · by lpm-firewall-aiSource inspection found package-aligned lifecycle behavior, explicit agent-extension management, pinned runtime tool downloads, and default anonymous telemetry, but no credential theft, remote payload execution, destructive action, or unconsented broad agent-control mutation. The lifecycle and extension capability merit a warning rather than a block.
Decision evidence
public snapshot- `package.json` runs `postinstall.mjs`.
- `postinstall.mjs` recursively removes cached `oh-my-opencode@*`/`oh-my-openagent@*` OpenCode entries.
- `bin/oh-my-opencode.js` delegates `lazycodex update` and `uninstall` to a Codex installer.
- `dist/index.js` downloads hash-pinned ast-grep/codegraph binaries at runtime.
- `dist/index.js` sends opt-out-capable anonymous activity telemetry to PostHog.
- No lifecycle code reads credentials or transmits environment/file contents.
- Postinstall only checks the local CLI/platform binary and invalidates this package's named cache entries.
- The executable-looking PowerShell file is an ast-grep smoke test.
- Runtime binary downloads use fixed HTTPS release URLs and SHA-256 checks.
- Codex-related installation is behind explicit CLI invocation, not npm postinstall.
Source & flagged code
13 flaggedPackage defines install-time lifecycle scripts.
package.jsonView on unpkgInstall-time lifecycle script is not statically allowlisted and needs review.
package.jsonView on unpkgPackage source references child process execution.
bin/oh-my-opencode.jsView on unpkg · L4Findings
Affected versions and remediation
This report applies to oh-my-opencode@4.19.0.
See all versions of oh-my-opencode for other recorded verdicts.
- Review the evidence and your use of oh-my-opencode@4.19.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.