frontier-plan-opencode-executor

SUSPICIOUS: the skill is mostly coherent with its stated repo-execution purpose and avoids obvious credential theft or hidden exfiltration, but default auto-commit/auto-push gives the agent autonomous write access to remote git history without explicit per-action approval. The destructive and install commands are documented as blocked unless approved, so the main risk is workflow autonomy rather than malware.