flux-opencode-profile

SUSPICIOUS: the stated purpose broadly matches profile export/import, but the missing workflow.md hides the real commands, install paths, and network endpoints. The main concern is unverifiable publication of local environment metadata to an unspecified remote service, with possible import/install actions whose provenance cannot be checked from the provided material.