update-opencode

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The skill's implementation explicitly directs subagents to fetch and summarize release notes from public GitHub repositories (see "仓库信息" and the "查询命令" using gh release list / gh release view for anomalyco/opencode and code-yeongyu/oh-my-openagent), which are open third-party, user-maintained content that the agent will read and act on as part of its workflow.