opencode-command-authoring

SUSPICIOUS. The stated purpose is modest, but the skill depends on undocumented, unverifiable local wrapper CLIs and mismatches official OpenCode command locations and invocation patterns. There is no evidence of explicit credential theft or exfiltration, but the execution trust and provenance gaps are disproportionate to a simple command-authoring skill.