opencode-github

Fail

Audited by Snyk on Aug 8, 2026

Risk Level: CRITICAL
Full Analysis

CRITICAL E005: Suspicious download URL detected in skill instructions.

  • Suspicious download URL detected (high risk: 0.90). Most links are legitimate GitHub example URLs used in the skill, but https://github.com.helper is a typosquatting/non‑GitHub domain (not github.com) and is highly suspicious as a potential malicious/redirected download source.

Issues (1)

E005
CRITICAL

Suspicious download URL detected in skill instructions.

Audit Metadata
Risk Level
CRITICAL
Analyzed
Aug 8, 2026, 02:21 AM
Issues
1
Security Audit — snyk — opencode-github