opencode-delegate
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a Node.js helper script to execute the
opencodeandgitcommand-line tools. This allows the AI agent to initiate and monitor external processes to perform coding tasks and inspect the repository state. - Evidence:
scripts/relay.mjsusesnode:child_processmethods such asspawnandexecSyncto callopencode runandgit status --porcelain. - [DYNAMIC_EXECUTION]: The
relay.mjsscript dynamically constructs and executes shell commands with arguments derived from user input and configuration flags. - Evidence: The
buildArgvfunction inscripts/relay.mjsassembles the command-line arguments for the implementer process, including model names, agent types, and session identifiers. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted task descriptions (briefs) that are passed directly to an LLM-backed implementer with file-writing capabilities. This creates a surface for instructions embedded in the codebase or the brief to influence the implementer's actions.
- Ingestion points:
scripts/relay.mjsreads the content of a task brief from a file (brief.txt) or via stdin. - Boundary markers: Absent. The script transmits the brief content directly to the implementer's standard input without additional delimiters or protective system instructions.
- Capability inventory: The implementer (
opencode) is typically run with thebuildagent, which has capabilities to modify files in the working directory and potentially execute shell commands. - Sanitization: Absent. The script performs no filtering, escaping, or sanitization of the brief content before processing.
- [EXTERNAL_DOWNLOADS]: The skill instructions direct users to download and install an external CLI tool from the public npm registry as a prerequisite for operation.
- Evidence:
SKILL.mdandreferences/dispatch-and-poll.mdexplicitly instruct the user to install theopencode-aipackage usingnpm i -g opencode-ai.
Audit Metadata