skill-authoring-and-sync
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides shell commands for executing a local script located at
~/.config/opencode/scripts/sync-opencode-settings.sh. This script is intended to handle the synchronization of settings and skills. - [DATA_EXFILTRATION]: The synchronization process involves transferring local configuration and skill files to a remote host (
scotttolinski@mini) over the network. This behavior is documented as the primary function of the skill and targets the author's own infrastructure. - [CREDENTIALS_UNSAFE]: The documentation references the standard SSH private key path (
~/.ssh/id_ed25519) for use with theOPENCODE_SYNC_IDENTITYenvironment variable to authenticate the synchronization process.
Audit Metadata