opencode-config

SUSPICIOUS: the core purpose is coherent and the file-path findings are benign documentation context, but the skill meaningfully changes agent permissions and showcases third-party plugin packages that OpenCode may auto-install/execute later. The official CLI validation step is proportionate, yet the plugin and permission-expansion footprint makes this higher than a simple config editor.