registry / roleflow / 1.0.1

roleflow@1.0.1

Roleflow: sistema OpenCode portable con roles por responsabilidad + routing barato + ahorro de tokens. Público, instalable desde cualquier PC o server con una línea en opencode.json.

AI Security Review

scanned 2d ago · by lpm-firewall-ai

LPM flags this version as an AI-agent control-surface risk. Installation automatically writes agent instructions and skills into a foreign, global OpenCode control surface. Existing definitions can be overwritten.

Static reason

One or more suspicious static signals were detected.

Trigger

npm installation with lifecycle scripts enabled.

Impact

Changes agent behavior across projects and can replace existing agent instructions and skills.

Mechanism

The postinstall hook recursively copies package agents and skills into the user's global OpenCode configuration without opt-in or collision protection.

Policy narrative

Installing the package invokes postinstall.mjs, which selects the user's global OpenCode configuration and recursively copies agent and skill definitions into it. The operation has no consent gate or protection against overwriting existing definitions. Generic agent names affect the broader OpenCode environment rather than an isolated package-owned extension directory.

AI rationale

The source establishes unconsented postinstall mutation of a foreign, global AI-agent control surface, meeting the explicit blocking rule. Ordinary development prompts and absent exfiltration do not neutralize this automatic control-surface mutation.

Evidence

package.jsonpostinstall.mjs.config/opencode/agents.config/opencode/skills

Decision evidence

public snapshot

with false-positive risk.

roleflow@1.0.1

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Source & flagged code