setup-opencode-ralph-rlm
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs and references NPM packages, primarily the vendor's own package
@doeixd/opencode-ralph-rlm. It also identifies optional or peer dependencies such as@ff-labs/fff-nodeand@ai-sdk/openai-compatible. - [COMMAND_EXECUTION]: The skill utilizes shell commands via
npxandnpmto execute the Ralph CLI for various lifecycle tasks, including project initialization (setup), health diagnostics (doctor), and starting the local provider service (serve). - [COMMAND_EXECUTION]: Generates an automation plugin (
ralph-autostart.ts) designed to spawn a background process for the Ralph provider service whenever the host environment is loaded. - [DATA_EXFILTRATION]: Provides standard procedures for managing LLM provider credentials using environment variables (e.g.,
RALPH_SUPERVISOR_API_KEY) or local configuration files. Communication with the provider and health monitoring are restricted tolocalhost(127.0.0.1).
Audit Metadata