opencode-optimization
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and workflow instructions for configuring the OpenCode IDE environment. It does not contain executable code, obfuscation, or malicious patterns.
- [COMMAND_EXECUTION]: The workflow documentation describes how to configure servers using the
npxcommand. This is standard practice for the Model Context Protocol (MCP) and Language Server Protocol (LSP) ecosystem and relies on the user providing specific package names in their local configuration. - [CREDENTIALS_UNSAFE]: The skill identifies several environment variables required for authenticated services (such as
GITHUB_TOKEN,VERCEL_TOKEN, andSANITY_AUTH_TOKEN). It correctly recommends using environment variable interpolation (e.g.,${ENVIRONMENT_VARIABLE}) rather than hardcoding sensitive credentials.
Audit Metadata