opencode
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of local shell commands through the
terminal()andprocess()tools to interact with the OpenCode CLI. These commands include repository management (e.g.,git clone), session control, and code generation tasks. - [EXTERNAL_DOWNLOADS]: The skill documentation references external installation methods using
npm installandbrew install. These are standard package management practices for the described tool and do not involve suspicious or unverified sources. - [INDIRECT_PROMPT_INJECTION]: As a coding assistant, the skill ingests external data (source code, PR diffs). It includes standard isolation practices like using temporary directories (
mktemp -d) and isolated worktrees to mitigate risks associated with processing untrusted codebases.
Audit Metadata