registry / openchamber-sogawugu / 1.24.2

openchamber-sogawugu@1.24.2

⚠ Under review

[![GitHub stars](https://img.shields.io/github/stars/openchamber/openchamber?style=flat&logo=data%3Aimage%2Fsvg%2Bxml%3Bbase64%2CPHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSIzMiIgaGVpZ2h0PSIzMiIgZmlsbD0iI2YxZWNlYyIgdmlld0JveD0iMCAwIDI1Ni

AI Security Review

scanned 19d ago · by lpm-firewall-ai

The inspected configuration writes and startup persistence are user-invoked, and the reviewed credential flow targets the local service. A clean verdict requires citations for 172 distinct paths, exceeding the 128 citation limit, so the full review remains unresolved.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Saving behavior settings in the UI or running the startup enable command.

Impact

No attack impact was established from these paths; the full clean review could not be completed within the citation limit.

Mechanism

The UI saves global agent instructions, and the CLI can create a startup service when explicitly enabled.

AI rationale

Evidence

server/lib/opencode/routes.jsdist/assets/SettingsView-CZpUS64U.jsbin/lib/commands-startup.jsbin/lib/cli-startup.jsbin/lib/cli-http.js

Decision evidence

public snapshot

AI called this Manual Review at 78.0% confidence as Unknown with medium false-positive risk.

AI review observations

The global AGENTS.md write is exposed through a settings save request from the UI.
Startup persistence is invoked by the explicit startup enable command.
The CLI sends the UI password to a local session endpoint and retries against the same local request URL.

Evidence against

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings

Manifest

NoLicense

scanned 1,272 file(s), 40.5 MB of source, external domains: 127.0.0.1, 192.168.1.74, api.anthropic.com, api.cerebras.ai, api.cline.bot, api.cohere.ai, api.commandcode.ai, api.deepinfra.com, api.deepseek.com, api.example.com, api.github.com, api.githubcopilot.com, api.groq.com, api.kimi.com, api.linear.app, api.minimax.io, api.minimaxi.com, api.mistral.ai, api.neuralwatt.com, api.ngrok.com, api.openai.com, api.openchamber.dev, api.perplexity.ai, api.push.apple.com, api.sandbox.push.apple.com, api.together.xyz, api.trycloudflare.com, api.typesafe.ai, api.x.ai, api.z.ai, api2.cursor.sh, auth.openai.com, auth.x.ai, autopush-cloudcode-pa.sandbox.googleapis.com, base-ui.com, cdn.jsdelivr.net, chatgpt.com, cloudcode-pa.googleapis.com, code.example.com, daily-cloudcode-pa.sandbox.googleapis.com, developers.cloudflare.com, discord.gg, docs.openchamber.dev, embed.diagrams.net, exe.dev, extension.invalid, fonts.googleapis.com, generativelanguage.googleapis.com, github.com, grok.com

Source & flagged code

13 flagged

bin/cli.test.jsView file

6import net from 'net'; L7: import { spawn } from 'child_process'; L8: import { pathToFileURL } from 'url';

High

Child Process

Package source references child process execution.

bin/cli.test.jsView on unpkg · L6

•matchType = previous_version_dangerous_delta matchedPackage = openchamber-sogawugu@1.21.6 matchedIdentity = npm:b3BlbmNoYW1iZXItc29nYXd1Z3U:1.21.6 similarity = 0.458 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/cli.test.jsView on unpkg

server/lib/package-manager.jsView file

812stdio: 'inherit', L813: shell: true, L814: ...getSpawnSyncBaseOptions(),

High

Findings

9 High6 Medium8 Low

HighChild Processbin/cli.test.js

HighShellserver/lib/package-manager.js

HighEntrypoint Build Divergenceserver/index.js

HighSame File Env Network Executionserver/lib/opencode/lifecycle.js

HighSandbox Evasion Gated Capabilityserver/lib/cloudflare-tunnel.js

HighTrigger Reachable External Ai Agent Control Surface Mutationserver/lib/opencode/skills.js

HighTrigger Reachable Persistencebin/lib/cli-startup.js

HighSemantic Analysis Limiteddist/assets/useAppFontEffects-BEVJ1dZc.js

HighPrevious Version Dangerous Deltabin/cli.test.js

MediumDynamic Requirebin/lib/commands-serve.js

MediumNetwork

Medium

Affected versions and remediation

This report applies to openchamber-sogawugu@1.24.2.

See all versions of openchamber-sogawugu for other recorded verdicts.

Review the evidence and your use of openchamber-sogawugu@1.24.2 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-17 00:48:10.610Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / openchamber-sogawugu / 1.24.2

openchamber-sogawugu@1.24.2

⚠ Under review

AI Security Review

scanned 19d ago · by lpm-firewall-ai

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Saving behavior settings in the UI or running the startup enable command.

Impact

No attack impact was established from these paths; the full clean review could not be completed within the citation limit.

Mechanism

The UI saves global agent instructions, and the CLI can create a startup service when explicitly enabled.

AI rationale

Evidence

server/lib/opencode/routes.jsdist/assets/SettingsView-CZpUS64U.jsbin/lib/commands-startup.jsbin/lib/cli-startup.jsbin/lib/cli-http.js

Decision evidence

public snapshot

AI called this Manual Review at 78.0% confidence as Unknown with medium false-positive risk.

AI review observations

The global AGENTS.md write is exposed through a settings save request from the UI.
Startup persistence is invoked by the explicit startup enable command.
The CLI sends the UI password to a local session endpoint and retries against the same local request URL.

Evidence against

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShellWebSocket

Supply chain

HighEntropyStringsMinifiedPossibleObfuscationTelemetryUrlStrings

Manifest

NoLicense

Source & flagged code

13 flagged

bin/cli.test.jsView file

6import net from 'net'; L7: import { spawn } from 'child_process'; L8: import { pathToFileURL } from 'url';

High

Child Process

Package source references child process execution.

bin/cli.test.jsView on unpkg · L6

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/cli.test.jsView on unpkg

server/lib/package-manager.jsView file

812stdio: 'inherit', L813: shell: true, L814: ...getSpawnSyncBaseOptions(),

High

Findings

9 High6 Medium8 Low

HighChild Processbin/cli.test.js

HighShellserver/lib/package-manager.js

HighEntrypoint Build Divergenceserver/index.js

HighSame File Env Network Executionserver/lib/opencode/lifecycle.js

HighSandbox Evasion Gated Capabilityserver/lib/cloudflare-tunnel.js

HighTrigger Reachable External Ai Agent Control Surface Mutationserver/lib/opencode/skills.js

HighTrigger Reachable Persistencebin/lib/cli-startup.js

HighSemantic Analysis Limiteddist/assets/useAppFontEffects-BEVJ1dZc.js

HighPrevious Version Dangerous Deltabin/cli.test.js

MediumDynamic Requirebin/lib/commands-serve.js

MediumNetwork

Medium

Affected versions and remediation

This report applies to openchamber-sogawugu@1.24.2.

See all versions of openchamber-sogawugu for other recorded verdicts.

Review the evidence and your use of openchamber-sogawugu@1.24.2 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-17 00:48:10.610Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.