opencode-sdlc-system@1.0.2

High-risk behavior combination matched malicious policy.

npm installation, through the postinstall lifecycle hook.

Subsequent OpenCode sessions load package-supplied hooks, system-prompt injection, and agent permissions.

Copies agent/plugin files and registers them in OpenCode configuration.

On npm installation, package.json automatically runs install.js. The script targets the user's OpenCode configuration directory, copies bundled agent and plugin code there, and modifies or creates opencode.json/c to enable the plugins. On later OpenCode sessions, the installed hooks can write workspace state and inject workspace content into the AI system prompt. This is an unconsented postinstall mutation of a foreign AI-agent control surface.

Source inspection confirms the lifecycle-driven global OpenCode configuration mutation; the scanner finding is substantiated. Although no exfiltration or remote code loading was found, this meets the blocking policy for unconsented postinstall AI-agent control-surface mutation.