Skills
skills/jal-co/jalco-opencode/create-opencode-plugin/Gen Agent Trust Hub

create-opencode-plugin

Pass

Audited by Gen Agent Trust Hub on Apr 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a local utility script extract-plugin-api.ts and instructions for the user to execute it via Bun. This script is designed to parse the local OpenCode workspace and generate reference documentation for the plugin API.
  • [EXTERNAL_DOWNLOADS]: The update-notifications.md reference file provides a pattern for checking for plugin updates by fetching package metadata from the official npm registry (registry.npmjs.org). This is a standard practice for version management and uses a well-known service.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 13, 2026, 11:04 AM
Security Audit — agent-trust-hub — create-opencode-plugin