flux-opencode-skill-builder
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard shell commands (
git rev-parse,ls,mkdir) and a local project utility (fluxctl) located in the.opencode/bin/directory. These commands are used for session state management and file organization within the repository, which is consistent with the skill's purpose as a builder tool. - [DATA_EXPOSURE]: Analysis of the skill's workflow shows it reads from the
.opencode/skill/directory and local project files (e.g., repository structure, 'brain vault') to inform the creation of new skills. This data access is localized to the repository and does not involve unauthorized access to sensitive credentials or system-level files. - [SAFE]: No indicators of malicious intent were found. The skill does not perform external network calls, does not install external packages, and contains no obfuscated or hidden instructions.
Audit Metadata