opencode-delegation
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends global installation of the
opencode-aipackage via npm (npm install -g opencode-ai@latest). This introduces a dependency on an external package for its core functionality.\n- [COMMAND_EXECUTION]: The skill invokes theopencodebinary and uses local Python scripts (delegation_executor.py) to process tasks. It also references a Makefile to orchestrate delegation calls.\n- [INDIRECT_PROMPT_INJECTION]: The skill creates a surface where external input is passed to a terminal-capable agent.\n - Ingestion points: User-provided strings (PROMPT) and file contents are inlined into the
opencode runcommand as described inSKILL.md.\n - Boundary markers: Absent; the prompt is passed as raw positional arguments to the CLI tool.\n
- Capability inventory: The
opencodeagent is explicitly described as havingcode_executioncapabilities, posing a risk if it executes malicious code embedded in a prompt.\n - Sanitization: Absent; inputs are directly interpolated into the command string without validation or escaping.
Audit Metadata