opencode-cli
Warn
Audited by Snyk on Apr 7, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The skill's recommended install command "curl -fsSL https://opencode.ai/install | bash" fetches and executes remote code from https://opencode.ai/install to install the required opencode CLI, which the skill depends on to run, creating a high-confidence runtime risk.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata