Loading npm security reports…

opencode-impm-cn@0.9.0: AI-agent control-surface risk | LPM Firewall

registry / opencode-impm-cn / 0.9.0

opencode-impm-cn@0.9.0

我是项目经理（AI项目经理）OpenCode 插件 - 中文版工程化全流程开发套件（agents + commands + skills + 工具链）

AI Security Review

scanned 2h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the dependency automatically changes the consumer project's OpenCode configuration and drops agent-executed assets. It also registers an additional browser plugin.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm installation runs postinstall automatically.

Impact

A dependency installation can alter the consumer project's AI-agent behavior and load additional plugin functionality.

Mechanism

Postinstall copies AI-agent assets, writes plugin code, and rewrites OpenCode configuration.

Policy narrative

When npm installs this package, postinstall runs without a separate user setup action. The installer uses the consumer install directory, copies agents, commands, and skills into .opencode, replaces and writes a local plugin loader, and rewrites opencode.json to register this package plus opencode-browser. This is an unconsented install-time mutation of a consumer AI-agent control surface.

Rationale

The package has a concrete automatic postinstall path that broadly modifies consumer OpenCode assets and configuration, including registration of another plugin. No exfiltration was found, but the install-time control-surface mutation meets the blocking policy.

Evidence

package.jsonscripts/install.mjsscripts/install-core.mjs.opencode/agents/.opencode/commands/.opencode/skills/.opencode/plugins/impm/.opencode/plugins/impm.js.opencode/package.jsonopencode.json

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/install.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/index.jsView file

137const corePath = pathToFileURL(join(PLUGIN_ROOT, "scripts", "install-core.mjs")).href; L138: const core = (await import(corePath)); L139: core.runInstall({

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L137

scripts/install.mjsView file

19Install-time code directly mutates a foreign AI-agent control surface: L19: * L20: * 将 assets/ 下的 agents、commands、skills 复制到目标项目的 .opencode/ 目录， L21: * 并将编译后的插件复制到 .opencode/plugins/impm/（opencode 自动加载本地插件）。 L22: * ... L39: * - 传入数据不存在时报错退出。 L40: * - custom 预设为手工维护：安装时若目标 opencode.json 已有该 agent 的模型配置则保留， L41: * 仅对缺失的 agent 按预设补齐（更新插件不影响 custom 手工设置）。 L42: * - clear 为特殊值：清理 opencode.json 中 impm 管理的 agent 模型配置，不写入任何设置。 L43: * - 不传 --agent-type：完全不调整 opencode.json 中 agent 的设置。 L44: * L45: * 幂等安装： L46: * - 维护累积安装清单 .opencode/impm-manifest.json（everInstalled 只增不减）， Write operation from scripts/install-core.mjs: L20: * 供 CLI 入口（install.mjs）和插件入口（src/index.ts → ensureInstalled）共用。 L21: * 职责：同步 assets、维护累积清单、清理过时文件、更新 opencode.json 配置。 L22: * ... L24: * - 所有路径由调用方传入，本模块不依赖 __dirna

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/install.mjsView on unpkg · L19

scripts/uninstall.mjsView file

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: t") { for (const name of managedagents) { const entry = config.agent[name]; if (!entry || typeof entry !== "object") { continue; } let changed = false; if ("model" in entry) { delete entry.model; changed = true; } if ("reasoning_effort" in entry) { delete entry.reasoning_effort; changed = true; } if (changed && object.keys(entry).length === 0) { delete config.agent[name]; } if (changed) { cleaned++; } } if (object.keys(config

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

scripts/uninstall.mjsView on unpkg

scripts/uninstall.ps1View file

•path = scripts/uninstall.ps1 kind = build_helper sizeBytes = 13669 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/uninstall.ps1View on unpkg

Source & flagged code

6 flagged

package.jsonView file

Lines 1-34json

1{

2 "name": "opencode-impm-cn",

3 "version": "0.9.0",

4 "description": "我是项目经理（AI项目经理）OpenCode 插件 - 中文版工程化全流程开发套件（agents + commands + skills + 工具链）",

5 "type": "module",

6 "main": "dist/index.js",

7 "types": "dist/index.d.ts",

8 "scripts": {

9 "build": "tsc",

10 "dev": "tsc --watch",

11 "prepublishOnly": "npm run build",

12 "install:plugin": "node scripts/install.mjs",

13 "uninstall:plugin": "node scripts/uninstall.mjs",

14 "postinstall": "node scripts/install.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L14

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L14

15 },

16 "keywords": [

17 "opencode-plugin",

18 "opencode",

19 "impm",

20 "project-manager",

21 "ai-project-manager",

22 "tdd"

23 ],

24 "author": "jenemy8023 <jenemy8023@163.com>",

25 "license": "Apache-2.0",

26 "files": [

27 "dist/",

28 "assets/",

29 "scripts/install.mjs",

30 "scripts/install-core.mjs",

31 "scripts/uninstall.mjs",

32 "scripts/install.ps1",

33 "scripts/uninstall.ps1",

34 "scripts/agent-models.json"

dist/index.jsView file

Lines 117-157javascript

117async function ensureInstalled(projectRoot) {

118 try {

119 const manifestPath = join(projectRoot, ".opencode", "impm-manifest.json");

120

scripts/install.mjsView file

Lines 1-39javascript

1/**

2 * Copyright 2026 jenemy8023 <jenemy8023@163.com>

3 *

4 * Licensed under the Apache License, Version 2.0 (the "License");

5 * you may not use this file except in compliance with the License.

6 * You may obtain a copy of the License at

7 *

8 * http://www.apache.org/licenses/LICENSE-2.0

9 *

10 * Unless required by applicable law or agreed to in writing, software

11 * distributed under the License is distributed on an "AS IS" BASIS,

scripts/uninstall.mjsView file

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: t") { for (const name of managedagents) { const entry = config.agent[name]; if (!entry || typeof entry !== "object") { continue; } let changed = false; if ("model" in entry) { delete entry.model; changed = true; } if ("reasoning_effort" in entry) { delete entry.reasoning_effort; changed = true; } if (changed && object.keys(entry).length === 0) { delete config.agent[name]; } if (changed) { cleaned++; } } if (object.keys(config

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

scripts/uninstall.mjsView on unpkg

scripts/uninstall.ps1View file

•path = scripts/uninstall.ps1 kind = build_helper sizeBytes = 13669 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/uninstall.ps1View on unpkg