Loading npm security reports…

opencode-impm-cn@0.8.10: AI-agent control-surface risk | LPM Firewall

registry / opencode-impm-cn / 0.8.10

opencode-impm-cn@0.8.10

我是项目经理（AI项目经理）OpenCode 插件 - 中文版工程化全流程开发套件（agents + commands + skills + 工具链）

AI Security Review

scanned 4h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package automatically changes the consuming project's OpenCode control surface. It installs agent resources and plugin code, then registers an additional browser plugin.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm installation runs the postinstall lifecycle hook.

Impact

A dependency install can activate package-supplied agent behavior and an extra browser-capable plugin in the consumer project.

Mechanism

Postinstall copies agent assets and rewrites OpenCode plugin configuration.

Policy narrative

The package declares a postinstall hook that runs without a separate setup command. The installer resolves INIT_CWD to the consuming project, copies agents, commands, skills, and plugin code into its .opencode directory, and rewrites opencode.json to register the package plus opencode-browser. This is an unconsented install-time mutation of a foreign AI-agent control surface.

Rationale

The automatic lifecycle hook makes broad OpenCode configuration and plugin changes in the consumer project, including registration of an additional browser plugin. This meets the install-hook abuse policy even though no exfiltration or network request was found.

Evidence

package.jsonscripts/install.mjsopencode.json.opencode/commands.opencode/agents.opencode/skills.opencode/plugins/impm.opencode/plugins/impm.js.opencode/package.json.opencode/impm-manifest.json

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/install.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

scripts/install.mjsView file

19* L20: * 将 assets/ 下的 agents、commands、skills 复制到目标项目的 .opencode/ 目录， L21: * 并将编译后的插件复制到 .opencode/plugins/impm/（opencode 自动加载本地插件）。 L22: * ... L39: * - 传入数据不存在时报错退出。 L40: * - custom 预设为手工维护：安装时若目标 opencode.json 已有该 agent 的模型配置则保留， L41: * 仅对缺失的 agent 按预设补齐（更新插件不影响 custom 手工设置）。 L42: * - clear 为特殊值：清理 opencode.json 中 impm 管理的 agent 模型配置，不写入任何设置。 L43: * - 不传 --agent-type：完全不调整 opencode.json 中 agent 的设置。 L44: * L45: * 幂等安装： L46: * - 维护累积安装清单 .opencode/impm-manifest.json（everInstalled 只增不减），

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/install.mjsView on unpkg · L19

7Manifest entrypoint (scripts.postinstall) carries capability families absent from dist/build output: environment+network L7: * L8: * http://www.apache.org/licenses/LICENSE-2.0 L9: * ... L65: const __filename = fileURLToPath(import.meta.url); L66: const __dirname = dirname(__filename); L67: ... L90: L91: /** 去除 UTF-8 BOM（Windows 编辑器常写入 BOM，直接 JSON.parse 会失败） */ L92: function stripBom(text) { ... L329: const pb = resolve(b); L330: return process.platform === "win32" L331: ? pa.toLowerCase() === pb.toLowerCase()

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

scripts/install.mjsView on unpkg · L7

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: 入口按 esm 解析）"); return true; } return false; } function updateopencodeconfig(projectroot, agenttype, manifest = null) { const configpath = join(projectroot, "opencode.json"); mkdirsync(projectroot, { recursive: true }); let config = {}; if (existssync(configpath)) { try { config = readjsonfile(configpath); } catch { console.warn(" opencode.json 解析失败，将重新创建"); } } config["$schema"] = config["$schema"] || "http

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

scripts/install.mjsView on unpkg

scripts/uninstall.ps1View file

•path = scripts/uninstall.ps1 kind = build_helper sizeBytes = 13669 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/uninstall.ps1View on unpkg

Source & flagged code

6 flagged

package.jsonView file

Lines 1-34json

1{

2 "name": "opencode-impm-cn",

3 "version": "0.8.10",

4 "description": "我是项目经理（AI项目经理）OpenCode 插件 - 中文版工程化全流程开发套件（agents + commands + skills + 工具链）",

5 "type": "module",

6 "main": "dist/index.js",

7 "types": "dist/index.d.ts",

8 "scripts": {

9 "build": "tsc",

10 "dev": "tsc --watch",

11 "prepublishOnly": "npm run build",

12 "install:plugin": "node scripts/install.mjs",

13 "uninstall:plugin": "node scripts/uninstall.mjs",

14 "postinstall": "node scripts/install.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L14

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L14

15 },

16 "keywords": [

17 "opencode-plugin",

18 "opencode",

19 "impm",

20 "project-manager",

21 "ai-project-manager",

22 "tdd"

23 ],

24 "author": "jenemy8023 <jenemy8023@163.com>",

25 "license": "Apache-2.0",

26 "files": [

27 "dist/",

28 "assets/",

29 "scripts/install.mjs",

30 "scripts/uninstall.mjs",

31 "scripts/install.ps1",

32 "scripts/uninstall.ps1",

33 "scripts/agent-models.json"

34 ],

scripts/install.mjsView file

Lines 1-39javascript

1/**

2 * Copyright 2026 jenemy8023 <jenemy8023@163.com>

3 *

4 * Licensed under the Apache License, Version 2.0 (the "License");

5 * you may not use this file except in compliance with the License.

6 * You may obtain a copy of the License at

7 *

8 * http://www.apache.org/licenses/LICENSE-2.0

9 *

High

Entrypoint Build Divergence

Manifest entrypoint contains risky behavior absent from dist/build output.

scripts/install.mjsView on unpkg · L7

scripts/uninstall.ps1View file

•path = scripts/uninstall.ps1 kind = build_helper sizeBytes = 13669 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/uninstall.ps1View on unpkg