opencode-env-setup

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Several listed URLs are remote install scripts (PowerShell/.sh or piped shell installers) which — while possibly official — are high-risk patterns for silent malware delivery if the host is compromised or untrusted.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). I flagged remote install scripts that the skill instructs to fetch-and-run at runtime (curl/irm piped to sh/ bash/iex): https://opencode.ai/install, https://deb.nodesource.com/setup_lts.x, https://astral.sh/uv/install.ps1, and https://astral.sh/uv/install.sh because they execute remote code during setup and are presented as required installation options.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). The skill explicitly directs installing packages with sudo, piping remote scripts into shell (curl | bash / sh), and using PowerShell ExecutionPolicy ByPass—actions that request or bypass elevated privileges and can modify system state.