flux-opencode-sync
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes a local binary (
fluxctl) within the workspace's.opencode/bin/directory to perform task management operations. It utilizes standard system utilities such asgit,jq, andsedto interact with the environment and process command output. - [PROMPT_INJECTION]: The skill accepts user-supplied input through the
$ARGUMENTSparameter. To protect against malicious input or command injection, the instructions enforce a specific format validation (e.g., identifiers must begin with thefn-prefix) before the data is utilized in shell commands.
Audit Metadata