registry / openchamber-sogawugu / 1.24.4

openchamber-sogawugu@1.24.4

⚠ Under review

[![GitHub stars](https://img.shields.io/github/stars/openchamber/openchamber?style=flat&logo=data%3Aimage%2Fsvg%2Bxml%3Bbase64%2CPHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHdpZHRoPSIzMiIgaGVpZ2h0PSIzMiIgZmlsbD0iI2YxZWNlYyIgdmlld0JveD0iMCAwIDI1Ni

AI Security Review

scanned 19d ago · by lpm-firewall-ai

The inspected manifest has no npm install hook, and the reviewed agent configuration writes are tied to settings or skill API actions. The package-wide decision remains unresolved because many required source paths were not fully reviewed and one required source file was reported as non-UTF-8.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Saving settings or submitting a skill API request activates the reviewed configuration writes.

Impact

The reviewed behavior does not establish an unconsented install-time change or credential disclosure; broader source coverage remains unresolved.

Mechanism

The settings endpoint writes submitted behavior content to the OpenCode configuration, and skill routes create user- or project-scoped skills.

AI rationale

Evidence

dist/assets/SettingsView-Dj8jpwJu.jsserver/lib/opencode/routes.jsserver/lib/opencode/skill-routes.jsserver/lib/opencode/skills.jsbin/lib/cli-http.js

Decision evidence

public snapshot

AI called this Manual Review at 76.0% confidence as Unknown with medium false-positive risk.

AI review observations

The manifest’s inspected scripts contain build and prepack work, with no npm install hook.
The settings interface sends behavior content to the agent configuration endpoint when saving.
That endpoint writes the submitted content to the OpenCode configuration’s AGENTS.md file.
Skill creation accepts an API request and chooses user or project scope from its submitted scope.
CLI session authentication posts the password to a local server URL and retries the original request URL with the returned cookie.
The scheduled-task and message-queue runtime hints concern slash-command parsing and template expansion.

Evidence against

The reviewed agent-configuration writes are tied to settings or skill API actions; the inspected source did not establish an unconsented install-time mutation.
The inspected CLI credential flow stays on the local server request path; no unrelated credential recipient was established.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVars

Source & flagged code

13 flagged

bin/cli.test.jsView file

6import net from 'net'; L7: import { spawn } from 'child_process'; L8: import { pathToFileURL } from 'url';

High

Child Process

Package source references child process execution.

bin/cli.test.jsView on unpkg · L6

•matchType = previous_version_dangerous_delta matchedPackage = openchamber-sogawugu@1.21.6 matchedIdentity = npm:b3BlbmNoYW1iZXItc29nYXd1Z3U:1.21.6 similarity = 0.458 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/cli.test.jsView on unpkg

server/lib/package-manager.jsView file

812stdio: 'inherit', L813: shell: true, L814: ...getSpawnSyncBaseOptions(),

High

Findings

9 High6 Medium8 Low

HighChild Processbin/cli.test.js

HighShellserver/lib/package-manager.js

HighEntrypoint Build Divergenceserver/index.js

HighSame File Env Network Executionserver/lib/opencode/lifecycle.js

HighSandbox Evasion Gated Capabilityserver/lib/cloudflare-tunnel.js

HighTrigger Reachable External Ai Agent Control Surface Mutationserver/lib/opencode/skills.js

HighTrigger Reachable Persistencebin/lib/cli-startup.js

HighSemantic Analysis Limiteddist/assets/useAppFontEffects-ByuPY2Kl.js

HighPrevious Version Dangerous Deltabin/cli.test.js

MediumDynamic Requirebin/lib/commands-serve.js

MediumNetwork

Medium

Affected versions and remediation

This report applies to openchamber-sogawugu@1.24.4.

See all versions of openchamber-sogawugu for other recorded verdicts.

Review the evidence and your use of openchamber-sogawugu@1.24.4 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-17 00:48:35.374Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

registry / openchamber-sogawugu / 1.24.4

openchamber-sogawugu@1.24.4

⚠ Under review

AI Security Review

scanned 19d ago · by lpm-firewall-ai

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Saving settings or submitting a skill API request activates the reviewed configuration writes.

Impact

The reviewed behavior does not establish an unconsented install-time change or credential disclosure; broader source coverage remains unresolved.

Mechanism

The settings endpoint writes submitted behavior content to the OpenCode configuration, and skill routes create user- or project-scoped skills.

AI rationale

Evidence

dist/assets/SettingsView-Dj8jpwJu.jsserver/lib/opencode/routes.jsserver/lib/opencode/skill-routes.jsserver/lib/opencode/skills.jsbin/lib/cli-http.js

Decision evidence

public snapshot

AI called this Manual Review at 76.0% confidence as Unknown with medium false-positive risk.

AI review observations

The manifest’s inspected scripts contain build and prepack work, with no npm install hook.
The settings interface sends behavior content to the agent configuration endpoint when saving.
That endpoint writes the submitted content to the OpenCode configuration’s AGENTS.md file.
Skill creation accepts an API request and chooses user or project scope from its submitted scope.
CLI session authentication posts the password to a local server URL and retries the original request URL with the returned cookie.
The scheduled-task and message-queue runtime hints concern slash-command parsing and template expansion.

Evidence against

The reviewed agent-configuration writes are tied to settings or skill API actions; the inspected source did not establish an unconsented install-time mutation.
The inspected CLI credential flow stays on the local server request path; no unrelated credential recipient was established.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVars

Source & flagged code

13 flagged

bin/cli.test.jsView file

6import net from 'net'; L7: import { spawn } from 'child_process'; L8: import { pathToFileURL } from 'url';

High

Child Process

Package source references child process execution.

bin/cli.test.jsView on unpkg · L6

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bin/cli.test.jsView on unpkg

server/lib/package-manager.jsView file

812stdio: 'inherit', L813: shell: true, L814: ...getSpawnSyncBaseOptions(),

High

Findings

9 High6 Medium8 Low

HighChild Processbin/cli.test.js

HighShellserver/lib/package-manager.js

HighEntrypoint Build Divergenceserver/index.js

HighSame File Env Network Executionserver/lib/opencode/lifecycle.js

HighSandbox Evasion Gated Capabilityserver/lib/cloudflare-tunnel.js

HighTrigger Reachable External Ai Agent Control Surface Mutationserver/lib/opencode/skills.js

HighTrigger Reachable Persistencebin/lib/cli-startup.js

HighSemantic Analysis Limiteddist/assets/useAppFontEffects-ByuPY2Kl.js

HighPrevious Version Dangerous Deltabin/cli.test.js

MediumDynamic Requirebin/lib/commands-serve.js

MediumNetwork

Medium

Affected versions and remediation

This report applies to openchamber-sogawugu@1.24.4.

See all versions of openchamber-sogawugu for other recorded verdicts.

Review the evidence and your use of openchamber-sogawugu@1.24.4 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-10-17 00:48:35.374Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.