Loading npm security reports…

opencode-impm-cn@1.0.0: AI-agent control-surface risk | LPM Firewall

registry / opencode-impm-cn / 1.0.0

opencode-impm-cn@1.0.0

我是项目经理（AI项目经理）OpenCode 插件 - 中文版工程化全流程开发套件（agents + commands + skills + 工具链）

AI Security Review

scanned 26d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package automatically modifies a consumer project’s OpenCode control surface. It adds agent assets and plugin registrations, including an additional browser plugin.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm installation or OpenCode loading the plugin after an asset-version mismatch

Impact

The package gains automatic control over agents, commands, skills, and enabled plugins in the consumer project.

Mechanism

postinstall and load-time copying plus OpenCode configuration mutation

Policy narrative

On npm installation, postinstall resolves INIT_CWD to the consumer project and copies package assets into its .opencode control directories. It replaces the local impm plugin payload, writes OpenCode configuration, and enables both this package and opencode-browser without a user command. The copied plugin also reruns installation when OpenCode loads it if its manifest version differs. This is an unconsented install-time mutation of a foreign AI-agent control surface.

AI rationale

The package automatically and broadly alters a consumer project’s OpenCode agents, commands, skills, plugin files, and configuration. That meets the install-control-surface blocking policy even though no exfiltration endpoint was found.

Evidence

package.jsonscripts/install.mjsscripts/install-core.mjsdist/index.jsopencode.json.opencode/agents.opencode/commands.opencode/skills.opencode/plugins/impm.opencode/plugins/impm.js

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/install.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/index.jsView file

137const corePath = pathToFileURL(join(PLUGIN_ROOT, "scripts", "install-core.mjs")).href; L138: const core = (await import(corePath)); L139: core.runInstall({

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L137

scripts/install.mjsView file

19Install-time code directly mutates a foreign AI-agent control surface: L19: * L20: * 将 assets/ 下的 agents、commands、skills 复制到目标项目的 .opencode/ 目录， L21: * 并将编译后的插件复制到 .opencode/plugins/impm/（opencode 自动加载本地插件）。 L22: * ... L39: * - 传入数据不存在时报错退出。 L40: * - custom 预设为手工维护：安装时若目标 opencode.json 已有该 agent 的模型配置则保留， L41: * 仅对缺失的 agent 按预设补齐（更新插件不影响 custom 手工设置）。 L42: * - clear 为特殊值：清理 opencode.json 中 impm 管理的 agent 模型配置，不写入任何设置。 L43: * - 不传 --agent-type：完全不调整 opencode.json 中 agent 的设置。 L44: * L45: * 幂等安装： L46: * - 维护累积安装清单 .opencode/impm-manifest.json（everInstalled 只增不减）， Write operation from scripts/install-core.mjs: L20: * 供 CLI 入口（install.mjs）和插件入口（src/index.ts → ensureInstalled）共用。 L21: * 职责：同步 assets、维护累积清单、清理过时文件、更新 opencode.json 配置。 L22: * ... L24: * - 所有路径由调用方传入，本模块不依赖 __dirna

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/install.mjsView on unpkg · L19

scripts/uninstall.mjsView file

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: t") { for (const name of managedagents) { const entry = config.agent[name]; if (!entry || typeof entry !== "object") { continue; } let changed = false; if ("model" in entry) { delete entry.model; changed = true; } if ("reasoning_effort" in entry) { delete entry.reasoning_effort; changed = true; } if (changed && object.keys(entry).length === 0) { delete config.agent[name]; } if (changed) { cleaned++; } } if (object.keys(config

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

scripts/uninstall.mjsView on unpkg

scripts/uninstall.ps1View file

•path = scripts/uninstall.ps1 kind = build_helper sizeBytes = 13669 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/uninstall.ps1View on unpkg

Source & flagged code

6 flagged

package.jsonView file

Lines 1-34json

1{

2 "name": "opencode-impm-cn",

3 "version": "1.0.0",

4 "description": "我是项目经理（AI项目经理）OpenCode 插件 - 中文版工程化全流程开发套件（agents + commands + skills + 工具链）",

5 "type": "module",

6 "main": "dist/index.js",

7 "types": "dist/index.d.ts",

8 "scripts": {

9 "build": "tsc",

10 "dev": "tsc --watch",

11 "prepublishOnly": "npm run build",

12 "install:plugin": "node scripts/install.mjs",

13 "uninstall:plugin": "node scripts/uninstall.mjs",

14 "postinstall": "node scripts/install.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L14

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L14

15 },

16 "keywords": [

17 "opencode-plugin",

18 "opencode",

19 "impm",

20 "project-manager",

21 "ai-project-manager",

22 "tdd"

23 ],

24 "author": "jenemy8023 <jenemy8023@163.com>",

25 "license": "Apache-2.0",

26 "files": [

27 "dist/",

28 "assets/",

29 "scripts/install.mjs",

30 "scripts/install-core.mjs",

31 "scripts/uninstall.mjs",

32 "scripts/install.ps1",

33 "scripts/uninstall.ps1",

34 "scripts/agent-models.json"

dist/index.jsView file

Lines 117-157javascript

117async function ensureInstalled(projectRoot) {

118 try {

119 const manifestPath = join(projectRoot, ".opencode", "impm-manifest.json");

120

scripts/install.mjsView file

Lines 1-39javascript

1/**

2 * Copyright 2026 jenemy8023 <jenemy8023@163.com>

3 *

4 * Licensed under the Apache License, Version 2.0 (the "License");

5 * you may not use this file except in compliance with the License.

6 * You may obtain a copy of the License at

7 *

8 * http://www.apache.org/licenses/LICENSE-2.0

9 *

10 * Unless required by applicable law or agreed to in writing, software

11 * distributed under the License is distributed on an "AS IS" BASIS,

scripts/uninstall.mjsView file

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: t") { for (const name of managedagents) { const entry = config.agent[name]; if (!entry || typeof entry !== "object") { continue; } let changed = false; if ("model" in entry) { delete entry.model; changed = true; } if ("reasoning_effort" in entry) { delete entry.reasoning_effort; changed = true; } if (changed && object.keys(entry).length === 0) { delete config.agent[name]; } if (changed) { cleaned++; } } if (object.keys(config

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

scripts/uninstall.mjsView on unpkg

scripts/uninstall.ps1View file

•path = scripts/uninstall.ps1 kind = build_helper sizeBytes = 13669 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/uninstall.ps1View on unpkg