Code Security Auditor

Overview

This skill enables OpenCode to perform a comprehensive pre-execution security audit of a given codebase and produce a structured, high-signal risk report. It analyzes the entire project including source code, dependency manifests, build scripts, and configuration files from a security-first perspective.

When to Use This Skill

Use this skill when:

• User requests security analysis of a codebase
• User asks to "audit", "scan", or "check" code for safety before running
• User wants to know if code is safe to execute locally
• Analyzing untrusted or third-party code
• Performing due diligence on new dependencies or projects

Analysis Workflow

Step 1: Understand the Project Scope