registry / opencode-skills-collection / 4.0.3

opencode-skills-collection@4.0.3

⚠ Under review

OpenCode CLI plugin that automatically downloads and keeps skills up to date.

Static Scan Results

scanned 3mo ago · by rust-scanner

Static analysis flagged 50 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.

Static reason

One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Manifest

WildcardDependency

scanned 168 file(s), 1.02 MB of source, external domains: amazon.com, api.apify.com, api.expo.dev, browserbase.com, console.apify.com, developers.notion.com, docs.anthropic.com, docs.stripe.com, fonts.googleapis.com, github.com, graph.facebook.com, huggingface.co, kit.svelte.dev, nextjs.org, platform.openai.com, prod.spline.design, turborepo.dev, vercel.com, web.dev, www.w3.org

Source & flagged code

39 flagged

bundled-skills/docs/maintainers/full-repo-audit-2026-05-23.mdView file

Lines 242-282markdown

242

243- Files: `scripts/validate-links.sh`, `docs_zh-CN/link-validation-report.txt`

244- Evidence: `scripts/validate-links.sh` writes `docs_zh-CN/link-validation-report.txt` with a timestamp and absolute local paths. The script labels this as a translated report but scans `docs/`, not `docs_zh-CN/`, and resolves internal links by basename only. The script itself notes that links such as `../../CATALOG.md` can be false positives.

245- Risk: rerunning the script creates non-portable tracked drift and produces a report that can mix real broken links with known false positives.

246- Suggested fix: either make the report deterministic and unambiguous, or stop tracking it. Resolve links relative to each source file and run separate checks for canonical docs and translated docs.

247

248### Low - deliberate pipe-to-shell examples remain allowlisted

249

250Resolved in follow-up patch: executable `curl|bash`, `curl|sh`, and `irm|iex` install examples in canonical skill sources were replaced with package-manager or download-inspect-execute flows, and obsolete pipe-to-shell allowlists were removed. The remaining `security-allowlist` comments cover non-pipe rule families or sandbox notes.

251

252- Files include `skills/bun-development/SKILL.md`, `skills/linkerd-patterns/SKILL.md`, `skills/cloud-penetration-testing/SKILL.md`, `skills/varlock/SKILL.md`, `skills/evolution/SKILL.md`, and plugin mirrors.

253- Evidence: `npm run security:docs` passes because these examples are allowlisted, but the repo still contains executable `curl|bash`, `curl|sh`, and `irm|iex` examples.

254- Risk: this is accepted by current policy, but remains risky guidance for automated agents.

255- Suggested fix: where practical, replace executable pipe-to-shell examples with package-manager or checksum-verified alternatives; keep allowlists only where no safe practical alternative exists.

256

257### Low - documentation examples use realistic-looking secret placeholders

258

259Resolved in follow-up patch: canonical examples now use `<AWS_ACCESS_KEY_ID>`, `<AWS_SECRET_ACCESS_KEY>`, and `<BASE64_PRIVATE_KEY>`, and `npm run security:docs` blocks those realistic placeholder patterns from returning.

260

261- Files include `skills/comfyui-gateway/references/integration.md`, `skills/security/aws-iam-best-practices/SKILL.md`, `skills/k8s-manifest-generator/resources/implementation-playbook.md`, and plugin mirrors.

262- Evidence: secret-pattern scanning found `AKIAIOSFODNN7EXAMPLE`, `wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY`, and `-----BEGIN PRIVATE KEY-----` examples. These are not confirmed live secrets: the AWS values are standard examples and the private key block is an ellipsis placeholder.

Critical

Critical Secret

Package contains a critical-looking secret pattern.

bundled-skills/docs/maintainers/full-repo-audit-2026-05-23.mdView on unpkg · L262

263- Risk: realistic secret-looking examples can create noisy secret-scan alerts and make it harder to distinguish documentation placeholders from real leaks.

264- Suggested fix: replace realistic credential examples with unmistakable placeholders such as `<AWS_ACCESS_KEY_ID>`, `<AWS_SECRET_ACCESS_KEY>`, and `<BASE64_PRIVATE_KEY>`.

265

266## Non-findings / bounded checks

267

268- The apparent `--- ` frontmatter prefix in eight skills is accepted by the repo parser (`^---\s*\n`) and those skills are indexed, so this is not currently a validator bug.

269- Duplicate names under `skills/.disabled` are intentionally skipped by validator/index generation.

270- Root npm production audit reported `0 vulnerabilities`.

271- Root, web app, and data package moderate audits reported `0 vulnerabilities`.

272- Loki todo-app frontend and backend moderate audits reported `0 vulnerabilities`.

273- Loki todo-app frontend and backend builds completed successfully.

274- Telegram and WhatsApp Node boilerplates compile successfully when installed in temp copies.

275- WhatsApp Node boilerplate moderate audit reported `0 vulnerabilities` in a temp copy.

276- Python syntax checking found 0 errors across 1077 source files.

277- Shell syntax checking found 0 errors across 61 shell scripts.

278- JavaScript syntax checking found 0 errors across 74 source files.

279- YAML and XML-family parse checks found 0 syntax errors in tracked files.

280- The 7 tracked symlinks all resolve to in-repo targets.

281- The strict JSON parse failures are JSONC/commented config files rather than malformed runtime JSON; TypeScript accepts `tsconfig.json` comments, and the commented `tsconfig-strict.json` is a reference artifact mirrored byte-for-byte.

282- Plugin mirror skill files are byte-for-byte synchronized with canonical `skills/` sources: 3094 matched, 0 drift.

262patternName = aws_access_key severity = critical line = 262 matchedText = - Eviden...der.

Critical

Secret Pattern

AWS access key ID in bundled-skills/docs/maintainers/full-repo-audit-2026-05-23.md

bundled-skills/docs/maintainers/full-repo-audit-2026-05-23.mdView on unpkg · L262

262patternName = private_key_rsa severity = critical line = 262 matchedText = - Eviden...der.

Critical

Secret Pattern

RSA private key in bundled-skills/docs/maintainers/full-repo-audit-2026-05-23.md

bundled-skills/docs/maintainers/full-repo-audit-2026-05-23.mdView on unpkg · L262

bundled-skills/playwright-skill/run.jsView file

Lines 1-34javascript

1#!/usr/bin/env node

2/**

3 * Universal Playwright Executor for Claude Code

4 *

5 * Executes Playwright automation code from:

6 * - File path: node run.js script.js

7 * - Inline code: node run.js 'await page.goto("...")'

8 * - Stdin: cat script.js | node run.js

9 *

10 * Ensures proper module resolution by running from skill directory.

bundled-skills/huggingface-tool-builder/references/baseline_hf_api.tsxView file

Lines 19-58tsx

19 Uses HF_TOKEN for auth if the environment variable is set.

21Examples:

22 baseline_hf_api.tsx

23 baseline_hf_api.tsx 5

24 HF_TOKEN=your_token baseline_hf_api.tsx 10

25`);

bundled-skills/vercel-optimize/lib/vercel.mjsView file

Lines 1-35javascript

1// Vercel CLI helpers. All shell-outs use execFile (not exec) — no shell injection. Error detection: exit code + JSON-parse first; stderr grep only as fallback (CLI error strings aren't a stable contract).

3import { execFile } from 'node:child_process';

4import { promisify } from 'node:util';

5import { readFile, access } from 'node:fs/promises';

bundled-skills/gemini-deep-research/scripts/research.pyView file

•path = bundled-skills/gemini-deep-research/scripts/research.py kind = build_helper sizeBytes = 24204 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bundled-skills/gemini-deep-research/scripts/research.pyView on unpkg

bundled-skills/web-artifacts-builder/scripts/shadcn-components.tar.gzView file

•path = bundled-skills/web-artifacts-builder/scripts/shadcn-components.tar.gz kind = compressed_blob sizeBytes = 19967 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

bundled-skills/web-artifacts-builder/scripts/shadcn-components.tar.gzView on unpkg

bundled-skills/theme-factory/theme-showcase.pdfView file

•path = bundled-skills/theme-factory/theme-showcase.pdf kind = high_entropy_blob sizeBytes = 124310 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

bundled-skills/theme-factory/theme-showcase.pdfView on unpkg

bundled-skills/last30days/tests/test_dates.pyView file

•path = bundled-skills/last30days/tests/test_dates.py kind = payload_in_excluded_dir sizeBytes = 3684 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

bundled-skills/last30days/tests/test_dates.pyView on unpkg

bundled-skills/competitor-analysis/scripts/gate_candidates.mjsView file

•matchType = previous_version_dangerous_delta matchedPackage = opencode-sk[redacted]@3.1.15 matchedIdentity = npm:[redacted]:3.1.15 similarity = 0.600 summary = stored previous version shares package body but lacks this dangerous source file

Critical

Previous Version Dangerous Delta

This package version adds a dangerous source file absent from the previous stored version; route for source-aware review.

bundled-skills/competitor-analysis/scripts/gate_candidates.mjsView on unpkg

bundled-skills/production-code-audit/SKILL.mdView file

Lines 132-172markdown

132- Purpose: E-commerce platform

133- Entry points: server.js, src/index.tsx

134

135**Phase 2: Scanning for Issues** (line-by-line analysis)

136

137Found 127 issues:

138- 🔴 CRITICAL: 8 issues

139- 🟠 HIGH: 23 issues

140- 🟡 MEDIUM: 41 issues

bundled-skills/screenshots/SKILL.mdView file

Lines 167-207markdown

1671. **Use `deviceScaleFactor: 2`** for true retina resolution

1682. **Set viewport to 1440x900** (produces 2880x1800 pixel images)

1693. **Handle authentication** if credentials were provided

1704. **Navigate to each page** and capture screenshots

171

bundled-skills/deployment-validation-config-validate/SKILL.mdView file

Lines 234-274markdown

234

235### 4. Configuration Testing

236

237```typescript

238import { describe, it, expect } from '@jest/globals';

239import { ConfigValidator } from './config-validator';

240

241describe

bundled-skills/fp-backend/SKILL.mdView file

1098patternName = generic_password severity = medium line = 1098 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in bundled-skills/fp-backend/SKILL.md

bundled-skills/fp-backend/SKILL.mdView on unpkg · L1098

1213patternName = generic_password severity = medium line = 1213 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in bundled-skills/fp-backend/SKILL.md

bundled-skills/fp-backend/SKILL.mdView on unpkg · L1213

bundled-skills/javascript-testing-patterns/resources/implementation-playbook.mdView file

516patternName = generic_password severity = medium line = 516 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in bundled-skills/javascript-testing-patterns/resources/implementation-playbook.md

bundled-skills/javascript-testing-patterns/resources/implementation-playbook.mdView on unpkg · L516

536patternName = generic_password severity = medium line = 536 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in bundled-skills/javascript-testing-patterns/resources/implementation-playbook.md

bundled-skills/javascript-testing-patterns/resources/implementation-playbook.mdView on unpkg · L536

551patternName = generic_password severity = medium line = 551 matchedText = password...23',

Medium

Secret Pattern

Hardcoded password in bundled-skills/javascript-testing-patterns/resources/implementation-playbook.md

bundled-skills/javascript-testing-patterns/resources/implementation-playbook.mdView on unpkg · L551

bundled-skills/fp-ts-errors/SKILL.mdView file

372patternName = generic_password severity = medium line = 372 matchedText = validate...5 })

Medium

Secret Pattern

Hardcoded password in bundled-skills/fp-ts-errors/SKILL.md

bundled-skills/fp-ts-errors/SKILL.mdView on unpkg · L372

373patternName = generic_password severity = medium line = 373 matchedText = // Right...5 })

Medium

Secret Pattern

Hardcoded password in bundled-skills/fp-ts-errors/SKILL.md

bundled-skills/fp-ts-errors/SKILL.mdView on unpkg · L373

bundled-skills/rclone-cli/references/providers/sftp.mdView file

157patternName = private_key_rsa severity = critical line = 157 matchedText = key_pem ...----

Critical

Secret Pattern

RSA private key in bundled-skills/rclone-cli/references/providers/sftp.md

bundled-skills/rclone-cli/references/providers/sftp.mdView on unpkg · L157

491patternName = private_key_rsa severity = critical line = 491 matchedText = key_pem ...----

Critical

Secret Pattern

RSA private key in bundled-skills/rclone-cli/references/providers/sftp.md

bundled-skills/rclone-cli/references/providers/sftp.mdView on unpkg · L491

bundled-skills/sql-injection-testing/SKILL.mdView file

215patternName = generic_password severity = medium line = 215 matchedText = SELECT *...mple

Medium

Secret Pattern

Hardcoded password in bundled-skills/sql-injection-testing/SKILL.md

bundled-skills/sql-injection-testing/SKILL.mdView on unpkg · L215

418patternName = generic_password severity = medium line = 418 matchedText = SELECT *...mple

Medium

Secret Pattern

Hardcoded password in bundled-skills/sql-injection-testing/SKILL.md

bundled-skills/sql-injection-testing/SKILL.mdView on unpkg · L418

bundled-skills/docs/contributors/examples.mdView file

462patternName = generic_password severity = medium line = 462 matchedText = password...ord'

Medium

Secret Pattern

Hardcoded password in bundled-skills/docs/contributors/examples.md

bundled-skills/docs/contributors/examples.mdView on unpkg · L462

526patternName = generic_password severity = medium line = 526 matchedText = password...ord'

Medium

Secret Pattern

Hardcoded password in bundled-skills/docs/contributors/examples.md

bundled-skills/docs/contributors/examples.mdView on unpkg · L526

607patternName = generic_password severity = medium line = 607 matchedText = passwo...

Medium

Secret Pattern

Hardcoded password in bundled-skills/docs/contributors/examples.md

bundled-skills/docs/contributors/examples.mdView on unpkg · L607

632patternName = generic_password severity = medium line = 632 matchedText = passwo...

Medium

bundled-skills/electron-development/SKILL.mdView file

541patternName = generic_password severity = medium line = 541 matchedText = read -rs...WORD

Medium

Secret Pattern

Hardcoded password in bundled-skills/electron-development/SKILL.md

bundled-skills/electron-development/SKILL.mdView on unpkg · L541

548patternName = generic_password severity = medium line = 548 matchedText = read -rs...WORD

Medium

Secret Pattern

Hardcoded password in bundled-skills/electron-development/SKILL.md

bundled-skills/electron-development/SKILL.mdView on unpkg · L548

Source & flagged code

39 flagged · loading source

bundled-skills/docs/maintainers/full-repo-audit-2026-05-23.mdView file

262patternName = aws_access_key severity = critical line = 262 matchedText = - Eviden...der.

Critical

Critical Secret

Package contains a critical-looking secret pattern.

bundled-skills/docs/maintainers/full-repo-audit-2026-05-23.mdView on unpkg · L262

262patternName = aws_access_key severity = critical line = 262 matchedText = - Eviden...der.

Critical

Secret Pattern

AWS access key ID in bundled-skills/docs/maintainers/full-repo-audit-2026-05-23.md

bundled-skills/docs/maintainers/full-repo-audit-2026-05-23.mdView on unpkg · L262

262patternName = private_key_rsa severity = critical line = 262 matchedText = - Eviden...der.

Critical

Secret Pattern

RSA private key in bundled-skills/docs/maintainers/full-repo-audit-2026-05-23.md

bundled-skills/docs/maintainers/full-repo-audit-2026-05-23.md

Findings

6 Critical6 High32 Medium6 Low

CriticalCritical Secretbundled-skills/docs/maintainers/full-repo-audit-2026-05-23.md

CriticalPrevious Version Dangerous Deltabundled-skills/competitor-analysis/scripts/gate_candidates.mjs

CriticalSecret Patternbundled-skills/rclone-cli/references/providers/sftp.md

CriticalSecret Patternbundled-skills/docs/maintainers/full-repo-audit-2026-05-23.md

HighChild Processbundled-skills/playwright-skill/run.js

HighShell

HighCredential Exfiltrationbundled-skills/huggingface-tool-builder/references/baseline_hf_api.tsx

HighRuntime Package Install

Affected versions and remediation

This report applies to opencode-skills-collection@4.0.3.

See all versions of opencode-skills-collection for other recorded verdicts.

Review the evidence and your use of opencode-skills-collection@4.0.3 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-07-17 01:26:55.172Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.