Loading npm security reports…

opencode-impm@0.9.0: AI-agent control-surface risk | LPM Firewall

registry / opencode-impm / 0.9.0

opencode-impm@0.9.0

I am the Project Manager (AI Project Manager) OpenCode plugin - an engineered full-lifecycle development suite (agents + commands + skills + tools) implementing the traditional waterfall development process, agile sprints, and hotfix flows

AI Security Review

scanned 3h ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Package installation silently mutates a consumer project's OpenCode control surface. It registers an additional browser plugin and drops executable plugin content.

Static reason

High-risk behavior combination matched malicious policy.

Trigger

npm installation runs postinstall; loading the plugin can also rerun installation.

Impact

A dependency installation enables package-selected agent plugins and commands in the consumer project without an explicit setup command.

Mechanism

Automatic consumer-project OpenCode plugin registration and asset deployment.

Policy narrative

On npm install, postinstall resolves INIT_CWD to the consumer project and copies commands, agents, skills, and executable plugin files into .opencode. It then rewrites opencode.json to register opencode-impm and opencode-browser. If lifecycle scripts were skipped, loading the plugin dynamically imports the installer and performs the same deployment. This is unconsented install-time mutation of a broad AI-agent control surface.

Rationale

The package has a concrete automatic postinstall chain that modifies consumer OpenCode configuration and enables an extra browser plugin. Its transparent source and lack of observed network exfiltration do not remove that install-hook control-surface abuse.

Evidence

package.jsonscripts/install.mjsscripts/install-core.mjsdist/index.jsopencode.json.opencode/commands/.opencode/agents/.opencode/skills/.opencode/plugins/impm/.opencode/plugins/impm.js

Source & flagged code

6 flagged · loading source

package.jsonView file

•scripts.postinstall = node scripts/install.mjs

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg

•scripts.postinstall = node scripts/install.mjs

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg

dist/index.jsView file

139const corePath = pathToFileURL(join(PLUGIN_ROOT, "scripts", "install-core.mjs")).href; L140: const core = (await import(corePath)); L141: core.runInstall({

Medium

Dynamic Require

Package source references dynamic require/import behavior.

dist/index.jsView on unpkg · L139

scripts/install.mjsView file

19Install-time code directly mutates a foreign AI-agent control surface: L19: * L20: * Copies agents, commands, skills from assets/ to the target project's .opencode/ directory, L21: * and copies the compiled plugin to .opencode/plugins/impm/ (opencode auto-loads local plugins). L22: * ... L39: * - Exits with error if the provided data does not exist. L40: * - custom preset is manually maintained: during installation, if the target opencode.json already has L41: * model configuration for an agent, it is preserved; only missing agents are filled in per preset L42: * (updating the plugin does not affect custom manual settings). L43: * - clear is a special value: cleans impm-managed agent model configurations in opencode.json, writes no settings. L44: * - No --agent-type passed:

Critical

Ai Agent Control Hijack

Source creates an unconsented AI-agent control surface through install-time mutation or a default unauthenticated remote skill channel.

scripts/install.mjsView on unpkg · L19

scripts/uninstall.mjsView file

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: { for (const name of managedagents) { const entry = config.agent[name]; if (!entry || typeof entry !== "object") { continue; } let changed = false; if ("model" in entry) { delete entry.model; changed = true; } if ("reasoning_effort" in entry) { delete entry.reasoning_effort; changed = true; } if (changed && object.keys(entry).length === 0) { delete config.agent[name]; } if (changed) { cleaned++; } } if (object.keys(config.age

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

scripts/uninstall.mjsView on unpkg

scripts/uninstall.ps1View file

•path = scripts/uninstall.ps1 kind = build_helper sizeBytes = 14081 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/uninstall.ps1View on unpkg

Source & flagged code

6 flagged

package.jsonView file

Lines 1-34json

1{

2 "name": "opencode-impm",

3 "version": "0.9.0",

4 "description": "I am the Project Manager (AI Project Manager) OpenCode plugin - an engineered full-lifecycle development suite (agents + commands + skills + tools) implementing the traditional waterfall development process, agile sprints, and hotfix flows",

5 "type": "module",

6 "main": "dist/index.js",

7 "types": "dist/index.d.ts",

8 "scripts": {

9 "build": "tsc",

10 "dev": "tsc --watch",

11 "prepublishOnly": "npm run build",

12 "install:plugin": "node scripts/install.mjs",

13 "uninstall:plugin": "node scripts/uninstall.mjs",

14 "postinstall": "node scripts/install.mjs"

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L14

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L14

15 },

16 "keywords": [

17 "opencode-plugin",

18 "opencode",

19 "impm",

20 "project-manager",

21 "ai-project-manager",

22 "tdd"

23 ],

24 "author": "jenemy8023 <jenemy8023@163.com>",

25 "license": "Apache-2.0",

26 "files": [

27 "dist/",

28 "assets/",

29 "scripts/install.mjs",

30 "scripts/install-core.mjs",

31 "scripts/uninstall.mjs",

32 "scripts/install.ps1",

33 "scripts/uninstall.ps1",

34 "scripts/agent-models.json"

dist/index.jsView file

Lines 119-159javascript

119async function ensureInstalled(projectRoot) {

120 try {

121 const manifestPath = join(projectRoot, ".opencode", "impm-manifest.json");

122

scripts/install.mjsView file

Lines 1-39javascript

1/**

2 * Copyright 2026 jenemy8023 <jenemy8023@163.com>

3 *

4 * Licensed under the Apache License, Version 2.0 (the "License");

5 * you may not use this file except in compliance with the License.

6 * You may obtain a copy of the License at

7 *

8 * http://www.apache.org/licenses/LICENSE-2.0

9 *

10 * Unless required by applicable law or agreed to in writing, software

11 * distributed under the License is distributed on an "AS IS" BASIS,

scripts/uninstall.mjsView file

•Runtime or CLI code links a write operation to an explicit external AI-agent control path: { for (const name of managedagents) { const entry = config.agent[name]; if (!entry || typeof entry !== "object") { continue; } let changed = false; if ("model" in entry) { delete entry.model; changed = true; } if ("reasoning_effort" in entry) { delete entry.reasoning_effort; changed = true; } if (changed && object.keys(entry).length === 0) { delete config.agent[name]; } if (changed) { cleaned++; } } if (object.keys(config.age

High

External Ai Agent Control Surface Mutation

Runtime or CLI source writes behavior-bearing configuration into a user or project AI-agent control surface.

scripts/uninstall.mjsView on unpkg

scripts/uninstall.ps1View file

•path = scripts/uninstall.ps1 kind = build_helper sizeBytes = 14081 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

scripts/uninstall.ps1View on unpkg