opencode-session-debugging
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
rgutility to search for session identifiers and related metadata within local application directories, such as~/.claude/transcriptsand~/.local/share/opencode. It also utilizesgitfor repository management, including cloning reference source code and managing development workflows.\n- [EXTERNAL_DOWNLOADS]: The skill fetches source code from a public GitHub repository (https://github.com/sst/opencode) to a temporary directory. This is used as a reference to verify system behavior during debugging and is consistent with the skill's technical purpose.\n- [PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection as it ingests untrusted data from session transcripts and logs. Mandatory Evidence Chain: 1. Ingestion points:~/.claude/transcripts/*.jsonland~/.local/share/opencode/log/*.login Phase 2. 2. Boundary markers: Absent. 3. Capability inventory: Shell execution viargandgit, and PR management tools. 4. Sanitization: Absent. The skill's primary purpose is to audit and debug these specific data sources, which mitigates the risk contextually.
Audit Metadata