Loading npm security reports…

opencode-agent-skill: Suspicious npm security report (Warn) | LPM Firewall

registry / opencode-agent-skill / 16.15.0

opencode-agent-skill@16.15.0

Pi-native UES coding-agent runtime with V16 deterministic correctness gates, durable evidence integrity, external-data provenance, Windows-safe cleanup, and measured cost-aware routing

AI Security Review

scanned 11m ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

No blocking static signals were detected.; source matched previously finalized malicious package; routed for review; previous stored version diff introduced dangerous source

Trigger

A user invokes the package CLI's install command; Pi may load the extension when the package is configured for Pi.

Impact

The package can add its own agent plugin and extension to supported agent environments.

Mechanism

The installer copies the package-owned router plugin into the OpenCode plugins directory and registers it in managed state.

AI rationale

Source inspection supports a warning for explicit setup of a first-party agent extension and plugin, not a confirmed attack. The scanner-supplied integration locations are fixture content or managed-block cleanup and do not show malicious behavior.

Evidence

package.jsonbin/ocskill.mjslib/installer.mjs

Decision evidence

public snapshot

AI called this Suspicious at 79.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

The package declares Pi extensions, including pi/extensions/ues.ts.

Source & flagged code

7 flagged · loading source

evals/long/graders/long-horizon.mjsView file

13const load = async (file) => L14: import(pathToFileURL(path.join(workspace, "src", file)).href + "?eval=" + Date.now() + "-" + Math.random()) L15:

Medium

Dynamic Require

Package source references dynamic require/import behavior.

evals/long/graders/long-horizon.mjsView on unpkg · L13

evals/polyglot/fixtures/polyglot-bench/python/tenant_auth.pyView file

•path = [redacted]-bench/python/tenant_auth.py kind = payload_in_excluded_dir sizeBytes = 123 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

evals/polyglot/fixtures/polyglot-bench/python/tenant_auth.pyView on unpkg

•path = [redacted]-bench/python/tenant_auth.py kind = build_helper sizeBytes = 123 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

evals/polyglot/fixtures/polyglot-bench/python/tenant_auth.pyView on unpkg

lib/content-artifacts.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 8

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/content-artifacts.mjs#virtual:normalized:round1View on unpkg

lib/process-runner.mjsView file

•matchType = normalized_sha256 matchedPackage = opencode-agent-skill@11.0.0 matchedPath = lib/process-runner.mjs matchedIdentity = npm:b3BlbmNvZGUtYWdlbnQtc2tpbGw:11.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/process-runner.mjsView on unpkg

lib/browser-runtime.mjsView file

•matchType = normalized_sha256 matchedPackage = opencode-agent-skill@11.0.0 matchedPath = lib/browser-runtime.mjs matchedIdentity = npm:b3BlbmNvZGUtYWdlbnQtc2tpbGw:11.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/browser-runtime.mjsView on unpkg

pi/extensions/ues.tsView file

•matchType = previous_version_dangerous_delta matchedPackage = opencode-agent-skill@16.14.0 matchedIdentity = npm:b3BlbmNvZGUtYWdlbnQtc2tpbGw:16.14.0 similarity = 0.967 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

pi/extensions/ues.tsView on unpkg

Source & flagged code

7 flagged

evals/long/graders/long-horizon.mjsView file

Lines 1-33javascript

1import assert from "node:assert/strict"

2import path from "node:path"

3import { spawnSync } from "node:child_process"

4import { fileURLToPath, pathToFileURL } from "node:url"

5

6const workspace = process.env.UES_EVAL_WORKSPACE

7const task = process.env.UES_EVAL_TASK

8if (!workspace || !task) {

9 console.error("UES_EVAL_WORKSPACE and UES_EVAL_TASK are required")

10 process.exit(2)

11}

12

13const load = async (file) =>

14 import(pathToFileURL(path.join(workspace, "src", file)).href + "?eval=" + Date.now() + "-" + Math.random())

15

Medium

Dynamic Require

Package source references dynamic require/import behavior.

evals/long/graders/long-horizon.mjsView on unpkg · L13

16const throws = (fn, Type) => assert.throws(fn, Type)

17

18switch (task) {

19 case "long-checkout-integration": {

20 const { calculateTotal } = await load("money.mjs")

21 const { reserveAll } = await load("inventory.mjs")

22 const { applyCharge } = await load("payment.mjs")

23 const { checkout } = await load("checkout.mjs")

24

25 const lines = [

26 { sku: "a", unitPriceCents: 250, quantity: 2 },

27 { sku: "a", unitPriceCents: 100, quantity: 1 },

28 { sku: "b", unitPriceCents: 50, quantity: 3 },

29 ]

30 assert.equal(calculateTotal(lines), 750)

31 throws(() => calculateTotal("x"), TypeError)

32 throws(() => calculateTotal([{ sku: "a", unitPriceCents: 1.5, quantity: 1 }]), TypeError)

33 throws(() => calculateTotal([{ sku: "a", unitPriceCents: -1, quantity: 1 }]), RangeError)

evals/polyglot/fixtures/polyglot-bench/python/tenant_auth.pyView file

•path = [redacted]-bench/python/tenant_auth.py kind = payload_in_excluded_dir sizeBytes = 123 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

evals/polyglot/fixtures/polyglot-bench/python/tenant_auth.pyView on unpkg

•path = [redacted]-bench/python/tenant_auth.py kind = build_helper sizeBytes = 123 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

evals/polyglot/fixtures/polyglot-bench/python/tenant_auth.pyView on unpkg

lib/content-artifacts.mjs#virtual:normalized:round1View file

•stage = ast_semantic_analysis; reason = ast_parse_error; limitedFiles = 8

High

Semantic Analysis Limited

A bounded semantic-analysis stage reached its safety limit; remaining detectors completed, but this package requires AI review.

lib/content-artifacts.mjs#virtual:normalized:round1View on unpkg

lib/process-runner.mjsView file

•matchType = normalized_sha256 matchedPackage = opencode-agent-skill@11.0.0 matchedPath = lib/process-runner.mjs matchedIdentity = npm:b3BlbmNvZGUtYWdlbnQtc2tpbGw:11.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/process-runner.mjsView on unpkg

lib/browser-runtime.mjsView file

•matchType = normalized_sha256 matchedPackage = opencode-agent-skill@11.0.0 matchedPath = lib/browser-runtime.mjs matchedIdentity = npm:b3BlbmNvZGUtYWdlbnQtc2tpbGw:11.0.0 similarity = 1.000 summary = normalized source hash matched finalized malicious source

High

Known Malware Source Similarity

Source file is highly similar to a previously finalized malicious package; route for source-aware review.

lib/browser-runtime.mjsView on unpkg

pi/extensions/ues.tsView file

•matchType = previous_version_dangerous_delta matchedPackage = opencode-agent-skill@16.14.0 matchedIdentity = npm:b3BlbmNvZGUtYWdlbnQtc2tpbGw:16.14.0 similarity = 0.967 summary = stored previous version shares package body but lacks this dangerous source file

High

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

pi/extensions/ues.tsView on unpkg