setup-opencode-remote

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The set mixes trusted, low‑risk links (Homebrew's raw.githubusercontent installer, Google Cloud SDK) and localhost health endpoints with unverified third‑party install endpoints (opencode.ai/install, opencode.ai/install.ps1, opencode.ai/download) that serve shell/PowerShell installers — direct remote install scripts from an untrusted domain are high‑risk because running them executes arbitrary code.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill explicitly downloads and executes external installers (e.g., curl -fsSL https://opencode.ai/install | bash and the Homebrew installer from raw.githubusercontent.com, plus fetching the Google Cloud SDK installer) as required steps in SKILL.md, which clearly ingests third‑party web content that can materially change runtime behavior and thus could enable indirect prompt/instruction injection.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill includes runtime commands that fetch and execute remote installer scripts (e.g., curl -fsSL https://opencode.ai/install | bash, irm https://opencode.ai/install.ps1 | iex, curl -fsSL https://sdk.cloud.google.com | bash, and /bin/bash -c "$(curl -fsSL https://raw.githubusercontent.com/Homebrew/install/HEAD/install.sh)"), which execute remote code and are required dependencies for the skill.