flux-opencode-impl-review

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). The docs instruct running a bundled repo binary and sending repository diffs/files/metadata to external review services (via setup-review/chat-send), and they also eval the remote tool's output — creating high-risk vectors for data exfiltration, supply-chain abuse, and remote code execution if the review tooling or its outputs are compromised.