flux-opencode-setup
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands to facilitate the setup process, including directory creation, file copying, and permission management.
- Evidence:
workflow.mdcontains commands such asmkdir -p .flux/bin,cp "${OPENCODE_DIR}/bin/fluxctl" .flux/bin/fluxctl, andchmod +x .flux/bin/fluxctl. - Context: These operations are restricted to the local project repository (determined via
git rev-parse --show-toplevel) and manage the vendor's own provided binaries from the.opencodedirectory. - [COMMAND_EXECUTION]: The skill optionally uses the GitHub CLI (
gh) to star the project repository upon user confirmation. - Evidence:
workflow.mdexecutesgh api -X PUT /user/starred/Nairon-AI/flux-opencodeif the user selects the option and the tool is available. - Context: This is a transparent, user-consented action for a vendor resource.
Audit Metadata