registry / roleflow / 1.0.0

roleflow@1.0.0

Roleflow: sistema OpenCode portable con roles por responsabilidad + routing barato + ahorro de tokens. Público, instalable desde cualquier PC o server con una línea en opencode.json.

AI Security Review

scanned 3d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installation automatically writes package-controlled instructions into OpenCode's global agent and skill configuration. Existing files can be overwritten without consent or ownership checks.

Static reason

One or more suspicious static signals were detected.

Trigger

npm installation with lifecycle scripts enabled.

Impact

Changes agent behavior across projects and can replace existing agent instructions; uninstall can remove identically named agent files.

Mechanism

The postinstall hook recursively copies the bundled agents and skills into directories under the user's home configuration.

Policy narrative

Installing the package activates a postinstall hook that copies its agent and skill instructions into the user's global OpenCode configuration. The copy operation has no consent gate, destination ownership check, or overwrite protection. This gives the package control over shared agent instructions beyond its own installation directory. The uninstall hook additionally removes generic agent filenames without establishing ownership.

AI rationale

The source establishes unconsented install-time mutation of a foreign, global AI-agent control surface, which meets the specified blocking rule. Ordinary instruction content and the absence of exfiltration do not neutralize that automatic mutation.

Evidence

package.jsonpostinstall.mjspreuninstall.mjs.config/opencodeagentsskills

roleflow@1.0.0

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code