registry / opencode-orchestrator / 1.7.17

opencode-orchestrator@1.7.17

Multi-agent mission control for OpenCode with Commander, Planner, Worker, and Reviewer workflows.

AI Security Review

scanned 1mo ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. Installing the package automatically registers its own OpenCode plugin in a user-level OpenCode configuration file. At runtime, the plugin can load JavaScript files from the current project's .opencode/plugins directory.

Static reason

One or more suspicious static signals were detected.

Trigger

npm installation triggers postinstall; OpenCode runtime initialization loads project plugins.

Impact

The package gains automatic activation in OpenCode, and project-controlled plugin files can execute in that runtime.

Mechanism

Automatic first-party OpenCode plugin registration and project-local dynamic plugin loading.

AI rationale

This is an automatic first-party agent-extension lifecycle action with project-local dynamic code loading, so it warrants a warning. Source inspection found no install-time network activity, credential theft, self-dependency chain, or concrete malicious payload.

Evidence

package.jsonscripts/run-install-hook.mjsdist/scripts/postinstall.jsdist/index.js~/.config/opencode/opencode.jsonc~/.config/opencode/opencode.json.opencode/plugins/*.js.opencode/plugins/*.mjs

Decision evidence

public snapshot

with false-positive risk.

opencode-orchestrator@1.7.17

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code