writing-opencode-plugins
Pass
Audited by Gen Agent Trust Hub on Jul 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of documentation and development guidelines for creating plugins within the OpenCode ecosystem. It does not contain any executable malicious code or dangerous instructions.- [SAFE]: The instructions prioritize security by mandating the use of the
context.ask()API for permission-gated tasks and requiring the validation of all external options arriving at runtime.- [SAFE]: Security best practices are explicitly reinforced, such as prohibiting the logging of credentials, tokens, or raw prompts, and ensuring that notifications remain privacy-safe.- [SAFE]: Development commands mentioned (bun typecheck,bun test) are standard for testing and verification in a Node.js/Bun environment.
Audit Metadata