registry / opencode-code-shadow / 0.1.2

opencode-code-shadow@0.1.2

Теневой наблюдатель кодовой базы для OpenCode — автоматическая память, аналитика и предсказание проблем

AI Security Review

scanned 2h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. Install-time code creates OpenCode TUI extension configuration and copies a first-party plugin into the user's OpenCode config directory. At plugin runtime, it persistently updates OpenCode's CRUSH.md AI-instruction file with package-directed autonomous tool-use rules. No exfiltration or remote execution is established.

Static reason

One or more suspicious static signals were detected.

Trigger

npm install triggers postinstall; loading the OpenCode plugin triggers CRUSH.md updates.

Impact

Changes global OpenCode plugin and AI-instruction surfaces without an explicit setup command, influencing future agent behavior.

Mechanism

first-party OpenCode extension setup plus persistent AI-instruction injection

Rationale

The package mutates OpenCode's global extension and instruction surfaces automatically, including at install time, but the payload is first-party and static inspection found no concrete theft, remote execution, or destructive behavior. Warn rather than block.

Evidence

package.jsonscripts/postinstall.jssrc/index.tstui-plugin.tsxsrc/install.ts~/.config/opencode/plugins/code-shadow/tui-plugin.tsx~/.config/opencode/tui.json~/.config/opencode/CRUSH.md~/.config/opencode/shadow/data.db

Decision evidence

public snapshot

AI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

`package.json` runs `scripts/postinstall.js` automatically.
`scripts/postinstall.js` copies a TUI plugin into `~/.config/opencode/plugins/code-shadow/`.
`scripts/postinstall.js` creates global `~/.config/opencode/tui.json` when absent.
`src/index.ts` automatically writes and refreshes `~/.config/opencode/CRUSH.md` with mandatory AI-tool-use rules.
`src/index.ts` activates that CRUSH.md behavior when the OpenCode plugin loads.

Evidence against

No HTTP, socket, child-process, eval, or dynamic-load primitives appear in package source.
The postinstall payload is the package's own local `tui-plugin.tsx`, not a remote payload.
The copied TUI plugin reads the package SQLite database read-only.
`src/install.ts` can edit `opencode.jsonc`, but it is not the manifest lifecycle target.

Behavioral surface

Source

CryptoFilesystem

Supply chain

HighEntropyStrings

ManifestNo manifest risk signals triggered.

scanned 19 file(s), 301 KB of source

Source & flagged code

2 flagged

package.jsonView file

Lines 20-43json

20 },

21 "peerDependencies": {

22 "@opencode-ai/plugin": "*"

23 },

24 "files": [

25 "src/",

26 "scripts/",

27 "tui-plugin.tsx",

28 "tui.jsonc",

29 "LICENSE",

30 "README.md"

31 ],

32 "dependencies": {},

33 "devDependencies": {

34 "bun-types": "^1.3.14",

35 "typescript": "^5.5.0"

36 },

37 "scripts": {

38 "build": "tsc",

39 "dev": "tsc --watch",

40 "postinstall": "node scripts/postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L40

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L40

41 }

42}

43

Source & flagged code

2 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/postinstall.js

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/postinstall.js

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

Findings

1 High1 Medium3 Low

HighInstall Time Lifecycle Scriptspackage.json

MediumAmbiguous Install Lifecycle Scriptpackage.json

LowScripts Present

LowFilesystem

LowHigh Entropy Strings

LPM CLI

package.json

Entrypointsmain → src/index.ts

RuntimeNo engine / OS / CPU constraints

Artifact369 KB · 23 files1 signature(s)

Install lifecyclepostinstall

Behavioral surface

CryptoFilesystemHighEntropyStringsManifest: clean

Source & flagged code

2 flagged

package.jsonView file

Lines 20-43json

20 },

21 "peerDependencies": {

22 "@opencode-ai/plugin": "*"

23 },

24 "files": [

25 "src/",

26 "scripts/",

27 "tui-plugin.tsx",

28 "tui.jsonc",

29 "LICENSE",

30 "README.md"

31 ],

32 "dependencies": {},

33 "devDependencies": {

34 "bun-types": "^1.3.14",

35 "typescript": "^5.5.0"

36 },

37 "scripts": {

38 "build": "tsc",

39 "dev": "tsc --watch",

40 "postinstall": "node scripts/postinstall.js"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L40

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L40

41 }

42}

43