creating-opencode-plugins
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Implementation patterns in the documentation utilize the
$shell execution utility to perform tasks such as triggering macOS system notifications viaosascriptand executingeslintfor code linting. - [EXTERNAL_DOWNLOADS]: The skill references an external GitHub repository (
github.com/ericc-ch/opencode-plugins) for a library intended to assist with plugin composition. - [INDIRECT_PROMPT_INJECTION]: The
NotifyPlugincode example interpolates event data directly into a shell command template without sanitization, which identifies a vulnerability surface where attacker-controlled event metadata (like tool names) could lead to command injection.
Audit Metadata