opencode-delegate

SUSPICIOUS. The skill’s behavior is largely aligned with its stated delegation purpose, and the referenced installer sources appear to be official OpenCode channels rather than unrelated exfiltration endpoints. However, it delegates write-capable work to an external CLI with auto-approved actions by default, forwarding control of the repository to a second agent session and relying on that tool’s own credential/config state. This is proportionate to the purpose but still materially risky, and the outdated install guidance increases supply-chain uncertainty slightly. No clear evidence of credential theft, covert exfiltration, or hidden malicious behavior was found.