registry / opencode-fractal-memory / 0.7.18

opencode-fractal-memory@0.7.18

Fractal memory system for OpenCode with semantic search and automatic compression.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. On plugin initialization, the package downloads embedding models and force-copies its agent and command files into ~/.config/opencode. This is a first-party OpenCode extension setup, not a confirmed malicious chain.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

Installing under Bun triggers the lifecycle path; loading the OpenCode plugin triggers runtime setup.

Impact

Modifies OpenCode-owned configuration and locally persists conversation memory; no source evidence of external data exfiltration.

Mechanism

Downloads fixed ML assets and installs package-owned OpenCode agent/command definitions.

AI rationale

This is not concrete malicious behavior, but automatic global OpenCode agent/command installation is a meaningful extension lifecycle risk. Per policy, it warrants a warning rather than a block.

Evidence

package.jsonscripts/postinstall.cjsdist/infrastructure/composition-root.jsdist/ensure-models.jsdist/plugin/index.jsdist/plugin/hooks/register-agents.jsscripts/download-models.ts~/.config/opencode/models/Xenova/~/.config/opencode/agent~/.config/opencode/commands~/.config/opencode/memory.db

Network endpoints3

opencode-fractal-memory@0.7.18

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code