opencode-sdlc-system@1.1.1

High-risk behavior combination matched malicious policy.

npm postinstall; then OpenCode session creation/first chat message

Changes the default agent, broadens agent directory permission, loads package code, and enables later external npx execution.

unconsented global AI-agent configuration mutation and automatic extension installation

Installing the package automatically executes install.js, which writes into the user's OpenCode control surface, registers its plugins, changes the default agent, and grants wildcard external-directory access. Once loaded by OpenCode, AutoDiscoveryPlugin inspects project manifests, automatically invokes npx to globally install skills, writes enabled MCP server commands into project configuration, and injects content into the agent system prompt.

This is a concrete unconsented postinstall mutation of a broad foreign AI-agent control surface, meeting the blocking policy. The subsequent plugin behavior compounds the risk through automatic extension installation and agent-control changes.