writing-opencode-plugins

Pass

Audited by Gen Agent Trust Hub on Nov 1, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a documentation resource, providing boilerplate code and architectural guidance for plugin development. It includes security best practices such as excluding environment files (.env) and sensitive keys from npm packages via .npmignore configuration.- [EXTERNAL_DOWNLOADS]: The skill's installation instructions involve fetching content from a public GitHub repository. This is a standard delivery mechanism for this type of resource.- [COMMAND_EXECUTION]: The documentation references standard software development commands for package management (bun install), testing (bun test), and publishing (npm publish) within the context of a developer's workflow.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 1, 2026, 04:07 AM