registry / opencode-setup / 1.1.14

opencode-setup@1.1.14

Installer OpenCode-skills for ikke-utviklere — GitHub, MCP-servere og mer

AI Security Review

scanned 2h ago · by lpm-firewall-ai

LPM treats this as warn-only first-party agent extension lifecycle risk. No confirmed malicious attack surface is established. The package is a user-invoked OpenCode skill installer with agent-facing setup instructions.

Static reason

One or more suspicious static signals were detected.

Trigger

User runs `opencode-setup`; later user invokes installed OpenCode skills.

Impact

Installs agent skills that may guide MCP/token configuration; no automatic exfiltration or install-time control-surface hijack found.

Mechanism

copies bundled agent skills to home skill directory

Rationale

The risky behavior is agent-extension setup and MCP/token guidance, but it is activated by an explicit CLI and skill use rather than npm lifecycle execution or hidden import-time behavior. Static source inspection found no credential harvesting/exfiltration, automatic foreign agent config rewrite, persistence, or destructive behavior.

Evidence

package.jsonbin/cli.jsskills/install-mcp/SKILL.mdskills/github-setup/SKILL.mdskills/onboarding/SKILL.md~/.agents/skills/<skillName>~/.npmrc~/.config/opencode/opencode.jsonc

Network endpoints9

npm.pkg.github.comgithub.comid.atlassian.comfigma.comgjensidige.piwik.proastral.shopencode.ainodejs.orgraw.githubusercontent.com

Decision evidence

public snapshot

AI called this Suspicious at 86.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

Read-only inspection found CLI writes packaged skills into ~/.agents/skills when user runs the bin.
Packaged skills instruct OpenCode to edit ~/.config/opencode/opencode.jsonc MCP config and collect/use GitHub/Jira/Figma/Piwik tokens.
bin/cli.js can run `npx --yes skills add gjensidige/skills` after checking ~/.npmrc, but the function is not called.

Evidence against

package.json has no install/preinstall/postinstall lifecycle scripts; behavior is user-invoked via bin.
bin/cli.js copies bundled skills only when invoked and does not execute on import/install.
No source exfiltration logic found; ~/.npmrc read is only a substring presence check.
No obfuscation, eval/vm/Function, native binary loading, destructive commands, or persistence hooks found.
MCP/config changes are instructions inside user-invoked skills, not lifecycle-triggered mutation by npm install.

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemShell

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 7.81 KB of source

Source & flagged code

2 flagged

bin/cli.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

3import { existsSync, mkdirSync, cpSync, readdirSync, statSync, readFileSync } from "fs";

4import { join, resolve } from "path";

5import { fileURLToPath } from "url";

6import { homedir, platform } from "os";

7import { createInterface } from "readline";

8import { execSync } from "child_process";

High

Child Process

Package source references child process execution.

bin/cli.jsView on unpkg · L7

10const SKILLS_SRC = fileURLToPath(new URL("../skills", import.meta.url));

11const SKILLS_DEST = join(homedir(), ".agents", "skills");

13const SKILLS = readdirSync(SKILLS_SRC).filter((f) =>

14 statSync(join(SKILLS_SRC, f)).isDirectory()

15);

17const isDryRun = process.argv.includes("--dry-run");

18const isNonInteractive = process.argv.includes("--all");

20function log(msg) {

21 console.log(msg);

22}

24function ensureDir(dir) {

25 if (!existsSync(dir)) {

26 if (!isDryRun) mkdirSync(dir, { recursive: true });

27 log(` Oppretter mappe: ${dir}`);

Lines 49-89javascript

49 });

50}

52function checkNpmrc() {

53 const npmrcPath = join(homedir(), ".npmrc");

54 if (!existsSync(npmrcPath)) return false;

55 const contents = readFileSync(npmrcPath, "utf8");

56 return contents.includes("npm.pkg.github.com") && contents.includes("_authToken");

57}

59function installGjensidigeSKills() {

60 if (!checkNpmrc()) {

61 log(" ⚠️ Finner ikke GitHub-token i ~/.npmrc.");

62 log(" Gjensidige-skills krever tilgang til GitHub Packages.");

63 log(" Kjør github-setup-skillen i OpenCode for å sette opp .npmrc, og kjør deretter opencode-setup på nytt.\n");

64 return;

65 }

67 log(" Laster ned offisielle Gjensidige-skills (gap-onboarding, builders)...");

68 try {

69 if (!isDryRun) {

70 execSync("npx --yes skills add gjensidige/skills", {

71 stdio: "inherit",

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/cli.jsView on unpkg · L69

72 env: { ...process.env },

73 });

74 } else {

75 log(" (tørrkjøring) ville kjørt: npx skills add gjensidige/skills");

76 }

77 } catch (err) {

78 log(` ✗ Klarte ikke laste ned Gjensidige-skills: ${err.message}`);

79 log(" Prøv manuelt: npx skills add gjensidige/skills\n");

80 }

81}

83async function selectSkills(rl) {

84 log("\nTilgjengelige skills:\n");

85 SKILLS.forEach((s, i) => log(` [${i + 1}] ${s}`));

86 log(` [a] Alle skills\n`);

88 const answer = await prompt(

89 rl,

Source & flagged code

2 flagged · loading source

bin/cli.jsView file

7import { createInterface } from "readline"; L8: import { execSync } from "child_process"; L9:

High

Child Process

Package source references child process execution.

bin/cli.jsView on unpkg · L7

69if (!isDryRun) { L70: execSync("npx --yes skills add gjensidige/skills", { L71: stdio: "inherit",

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/cli.jsView on unpkg · L69

Findings

3 High1 Medium2 Low

HighChild Processbin/cli.js

HighShell

HighRuntime Package Installbin/cli.js

MediumEnvironment Vars

LowScripts Present

LowFilesystem

Source & flagged code

2 flagged

bin/cli.jsView file

Lines 1-27javascript

1#!/usr/bin/env node

3import { existsSync, mkdirSync, cpSync, readdirSync, statSync, readFileSync } from "fs";

4import { join, resolve } from "path";

5import { fileURLToPath } from "url";

6import { homedir, platform } from "os";

7import { createInterface } from "readline";

8import { execSync } from "child_process";

High

Child Process

Package source references child process execution.

bin/cli.jsView on unpkg · L7

10const SKILLS_SRC = fileURLToPath(new URL("../skills", import.meta.url));

11const SKILLS_DEST = join(homedir(), ".agents", "skills");

13const SKILLS = readdirSync(SKILLS_SRC).filter((f) =>

14 statSync(join(SKILLS_SRC, f)).isDirectory()

15);

17const isDryRun = process.argv.includes("--dry-run");

18const isNonInteractive = process.argv.includes("--all");

20function log(msg) {

21 console.log(msg);

22}

24function ensureDir(dir) {

25 if (!existsSync(dir)) {

26 if (!isDryRun) mkdirSync(dir, { recursive: true });

27 log(` Oppretter mappe: ${dir}`);

Lines 49-89javascript

49 });

50}

52function checkNpmrc() {

53 const npmrcPath = join(homedir(), ".npmrc");

54 if (!existsSync(npmrcPath)) return false;

55 const contents = readFileSync(npmrcPath, "utf8");

56 return contents.includes("npm.pkg.github.com") && contents.includes("_authToken");

57}

59function installGjensidigeSKills() {

60 if (!checkNpmrc()) {

61 log(" ⚠️ Finner ikke GitHub-token i ~/.npmrc.");

62 log(" Gjensidige-skills krever tilgang til GitHub Packages.");

63 log(" Kjør github-setup-skillen i OpenCode for å sette opp .npmrc, og kjør deretter opencode-setup på nytt.\n");

64 return;

65 }

67 log(" Laster ned offisielle Gjensidige-skills (gap-onboarding, builders)...");

68 try {

69 if (!isDryRun) {

70 execSync("npx --yes skills add gjensidige/skills", {

71 stdio: "inherit",

High

Runtime Package Install

Package source invokes a package manager install command at runtime.

bin/cli.jsView on unpkg · L69

72 env: { ...process.env },

73 });

74 } else {

75 log(" (tørrkjøring) ville kjørt: npx skills add gjensidige/skills");

76 }

77 } catch (err) {

78 log(` ✗ Klarte ikke laste ned Gjensidige-skills: ${err.message}`);

79 log(" Prøv manuelt: npx skills add gjensidige/skills\n");

80 }

81}

83async function selectSkills(rl) {

84 log("\nTilgjengelige skills:\n");

85 SKILLS.forEach((s, i) => log(` [${i + 1}] ${s}`));

86 log(` [a] Alle skills\n`);

88 const answer = await prompt(

89 rl,