opencode-session-visualizer

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 0.90). The skill explicitly requires extracting and embedding the full session JSON (including tool inputs/outputs and raw message contents) into the generated HTML, which will include any secrets or API keys present in messages verbatim, creating a high exfiltration risk.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). 该 skill 的运行路径是从本地 opencode.db 导出会话 data（其中包含用户/助手消息等自由文本）并注入到 assets/template.html 的 <script id="conv-data" type="application/json">__SESSION_DATA__</script>，随后在浏览器内用 JSON.parse 读取并对这些文本做 Markdown 渲染与工具卡片展开。