Loading npm security reports…

opencode-orchestrator@1.7.18: AI-agent control-surface risk | LPM Firewall

registry / opencode-orchestrator / 1.7.18

opencode-orchestrator@1.7.18

Multi-agent mission control for OpenCode with Commander, Planner, Worker, and Reviewer workflows.

AI Security Review

scanned 24d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installing the package automatically registers it in the user's OpenCode configuration. A later OpenCode launch loads code that adds commands and agents to that AI-agent control surface.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Trigger

npm installation outside CI, followed by an OpenCode launch.

Impact

The package gains automatic control-surface loading without an explicit user setup command.

Mechanism

Postinstall registration in a user-wide OpenCode plugin configuration.

Policy narrative

The package's postinstall hook launches its bundled installer. Outside CI, that installer discovers a user-wide OpenCode configuration directory, creates or rewrites the configuration if necessary, and adds opencode-orchestrator to the plugin list. When OpenCode subsequently loads the plugin, its configuration handler adds commands and agent definitions. This is an unconsented install-time mutation of a foreign AI-agent control surface.

AI rationale

The automatic postinstall hook writes to user-wide OpenCode configuration and enables this plugin without an explicit setup action. That matches the policy's publish-block condition for unconsented lifecycle mutation of a broad AI-agent control surface.

Evidence

package.jsonscripts/run-install-hook.mjsdist/scripts/postinstall.jsdist/index.js~/.config/opencode/opencode.jsonc~/.config/opencode/opencode.json$XDG_CONFIG_HOME/opencode/opencode.jsonc$XDG_CONFIG_HOME/opencode/opencode.json

Source & flagged code

5 flagged

package.jsonView file

Lines 40-80json

40 "README.md",

41 "LICENSE",

42 "opencode-orchestrator.schema.json"

43 ],

44 "scripts": {

45 "docker:build-all": "docker compose run --rm dev && docker compose run --rm rust-arm64 && docker compose run --rm win-builder",

46 "docker:build-win": "docker compose run --rm win-builder",

47 "docker:rust-dist": "docker compose run --rm dev && docker compose run --rm rust-arm64 && (sudo chown -R $(id -u):$(id -g) bin/ 2>/dev/null || true)",

48 "docker:test": "docker compose run --rm test",

49 "docker:clean": "docker compose down -v",

50 "sync:landing": "node scripts/sync-landing.mjs",

51 "prebuild": "node scripts/sync-landing.mjs",

52 "build": "node scripts/build.mjs",

53 "gen:schema": "esbuild scripts/gen-schema.ts --bundle --platform=node --format=esm --outfile=node_modules/.cache/gen-schema.mjs && node node_modules/.cache/gen-schema.mjs",

54 "build:all": "npm run build && npm run docker:rust-dist",

55 "test": "vitest run --reporter=verbose",

56 "test:coverage": "vitest run --coverage",

57 "test:unit": "vitest run tests/unit --reporter=verbose",

58 "test:e2e": "vitest run tests/e2e --reporter=verbose",

59 "test:all": "npm run build && vitest run --reporter=verbose && echo '=== ALL TESTS PASSED ==='",

60 "postinstall": "node scripts/run-install-hook.mjs postinstall",

High

Install Time Lifecycle Scripts

Package defines install-time lifecycle scripts.

package.jsonView on unpkg · L60

Medium

Ambiguous Install Lifecycle Script

Install-time lifecycle script is not statically allowlisted and needs review.

package.jsonView on unpkg · L60

61 "cleanup:plugin": "node scripts/run-install-hook.mjs preuninstall",

62 "prepublishOnly": "npm run build",

63 "publish:token": "npm publish --access public",

64 "sync:readme-version": "node scripts/sync-readme-version.mjs",

65 "version": "node scripts/sync-readme-version.mjs --stage",

66 "release:preflight": "node scripts/release-preflight.mjs",

67 "release:patch": "node scripts/release-auth-check.mjs && node scripts/release-version.mjs patch && npm run release:preflight && npm run docker:rust-dist && node scripts/release-sync-artifacts.mjs && npm run publish:token",

68 "release:minor": "node scripts/release-auth-check.mjs && node scripts/release-version.mjs minor && npm run release:preflight && npm run docker:rust-dist && node scripts/release-sync-artifacts.mjs && npm run publish:token",

69 "release:major": "node scripts/release-auth-check.mjs && node scripts/release-version.mjs major && npm run release:preflight && npm run docker:rust-dist && node scripts/release-sync-artifacts.mjs && npm run publish:token",

70 "release:dry-run": "node scripts/release-preflight.mjs --allow-dirty --skip-branch --skip-version-check",

71 "release:push-tags": "git push origin main && git push origin --tags",

72 "release:clean": "shx rm -rf dist bin && docker compose down -v",

73 "reset:local": "brew uninstall opencode 2>/dev/null; rm -rf ~/.config/opencode ~/.opencode ~/.local/share/opencode ~/.cache/opencode/node_modules/opencode-orchestrator && echo '=== Clean done ===' && brew install opencode && echo '{\"plugin\": [\"opencode-orchestrator\"], \"$schema\": \"https://opencode.ai/config.json\"}' > ~/.config/opencode/opencode.json && echo '=== Reset (Dev) complete. Run: opencode ==='",

74 "reset:prod": "brew uninstall opencode 2>/dev/null; rm -rf ~/.config/opencode ~/.opencode ~/.local/share/opencode ~/.cache/opencode/node_modules/opencode-orchestrator && echo '=== Clean done ===' && brew install opencode && echo '{\"plugin\": [\"opencode-orchestrator\"], \"$schema\": \"https://opencode.ai/config.json\"}' > ~/.config/opencode/opencode.json && npm run cleanup:plugin && npm uninstall -g opencode-orchestrator && echo '=== Reset (Prod) complete. Run: opencode ==='",

75 "ginstall": "npm install -g opencode-orchestrator",

76 "log": "tail -f \"$(node -e 'console.log(require(\"os\").tmpdir())')/opencode-orchestrator.log\""

77 },

78 "engines": {

79 "node": ">=24"

80 },

dist/index.jsView file

Lines 2235-2275javascript

2235 }

2236 }

2237 /**

2238 * Clear task memory (Short-term)

2239 */

2240 clearTaskMemory() {

2241 for (const entry of this

bin/orchestrator-linux-x64View file

•path = bin/orchestrator-linux-x64 kind = native_binary sizeBytes = 5578288 magicHex = [redacted]

Medium

Ships Native Binary

Package ships native binary artifacts.

bin/orchestrator-linux-x64View on unpkg