registry / opencode-skills-collection / 4.0.31

opencode-skills-collection@4.0.31

OpenCode CLI plugin that automatically downloads and keeps skills up to date.

AI Security Review

scanned 2mo ago · by lpm-firewall-ai

No concrete malicious chain, install hook, exfiltration, or remote payload execution was found. The automatic mutation of an AI-agent skill surface warrants a warning under the extension lifecycle policy.

Static reason

One or more suspicious static signals were detected.

Trigger

OpenCode loads the plugin; separately, a user invokes bundled-skills/playwright-skill/run.js.

Impact

The package modifies its OpenCode extension/control surface and exposes bundled skill content to the agent.

Mechanism

First-party OpenCode skill-vault and pointer installation.

AI rationale

Evidence

package.jsondist/index.jsdist/skill-pointer/vault-installer.jsdist/skill-pointer/pointer-generator.jsbundled-skills/playwright-skill/run.js

Decision evidence

public snapshot

AI called this Suspicious at 88.0% confidence as Dangerous Capability with medium false-positive risk.

Evidence for warning

On OpenCode startup, the plugin creates ~/.config/opencode/skills and runs its installer.
The installer copies bundled skills into the package-owned OpenCode vault and writes category pointer skills.
A bundled Playwright helper can install dependencies and execute code only when a user explicitly runs it.

Evidence against

package.json has no preinstall/install/postinstall hook; prepublishOnly is publish-time build only.
Core plugin source contains no network, credential harvesting, shell execution, or remote-payload logic.
The Playwright executor consumes explicit file, argument, or stdin input rather than running at package install/import.

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell

Supply chain

HighEntropyStringsUrlStrings

Source & flagged code

8 flagged

bundled-skills/developer-signup-flow/SKILL.mdView file

165patternName = stripe_test_secret severity = high line = 165 matchedText = sk[redacted]]

High

High Secret

Package contains a high-severity secret pattern.

bundled-skills/developer-signup-flow/SKILL.mdView on unpkg · L165

165patternName = stripe_test_secret severity = high line = 165 matchedText = sk[redacted]]

High

Secret Pattern

Stripe test secret key in bundled-skills/developer-signup-flow/SKILL.md

bundled-skills/developer-signup-flow/SKILL.mdView on unpkg · L165

bundled-skills/playwright-skill/run.jsView file

Lines 1-32javascript

1#!/usr/bin/env node

2/**

3 * Universal Playwright Executor for Claude Code

4 *

5 * Executes Playwright automation code from:

6 * - File path: node run.js script.js

7 * - Inline code: node run.js 'await page.goto("...")'

8 * - Stdin: cat script.js | node run.js

9 *

10 * Ensures proper module resolution by running from skill directory.

11 */

13const fs = require('fs');

14const path = require('path');

Medium

Dynamic Require

Package source references dynamic require/import behavior.

bundled-skills/playwright-skill/run.jsView on unpkg · L12

15const { execSync } = require('child_process');

16const sanitizeFilename = require('sanitize-filename');

18// Change to skill directory for proper module resolution

19process.chdir(__dirname);

21function safeUserPath(pathValue, baseDir = process.cwd()) {

22 const root = path.resolve(baseDir);

23 const segments = String(pathValue ?? '').split(/[\\/]+/).filter(Boolean).map((segment) => {

24 const sanitized = sanitizeFilename(segment);

25 if (sanitized !== segment || !sanitized) {

26 throw new Error(`Unsafe path segment: ${segment}`);

27 }

28 return sanitized;

29 });

30 const target = path.resolve(root, ...segments);

31 const rel = path.relative(root, target);

32 if (rel.startsWith('..') || path.isAbsolute(rel)) {

bundled-skills/huggingface-tool-builder/references/baseline_hf_api.tsxView file

39L40: const token = process.env.HF_TOKEN; L41: const headers: Record<string, string> = token ... L44: L45: const url = `https://huggingface.co/api/models?limit=${limit}`; L46: ... L54: L55: const text = await res.text(); L56: process.stdout.write(text); L57: })();

High

Credential Exfiltration

Source combines credential-like environment material and outbound requests; review data flow before blocking.

bundled-skills/huggingface-tool-builder/references/baseline_hf_api.tsxView on unpkg · L39

bundled-skills/gemini-deep-research/scripts/research.pyView file

•path = bundled-skills/gemini-deep-research/scripts/research.py kind = build_helper sizeBytes = 24204 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

bundled-skills/gemini-deep-research/scripts/research.pyView on unpkg

bundled-skills/web-artifacts-builder/scripts/shadcn-components.tar.gzView file

•path = bundled-skills/web-artifacts-builder/scripts/shadcn-components.tar.gz kind = compressed_blob sizeBytes = 19967 magicHex = [redacted]

Medium

Ships Compressed Blob

Package ships compressed or archive-like blobs.

bundled-skills/web-artifacts-builder/scripts/shadcn-components.tar.gzView on unpkg

bundled-skills/theme-factory/theme-showcase.pdfView file

•path = bundled-skills/theme-factory/theme-showcase.pdf kind = high_entropy_blob sizeBytes = 124310 magicHex = [redacted]

High

Ships High Entropy Blob

Package ships high-entropy non-source blobs.

bundled-skills/theme-factory/theme-showcase.pdfView on unpkg

bundled-skills/fedora-hyprland-installer/tests/test-scripts.shView file

•path = bundled-skills/fedora-hyprland-installer/tests/test-scripts.sh kind = payload_in_excluded_dir sizeBytes = 1740 magicHex = [redacted]

High

Payload In Excluded Dir

Package hides binary, compressed, or executable-looking payloads in test/fixture/hidden paths.

bundled-skills/fedora-hyprland-installer/tests/test-scripts.shView on unpkg

Source & flagged code

8 flagged · loading source

bundled-skills/developer-signup-flow/SKILL.mdView file

165patternName = stripe_test_secret severity = high line = 165 matchedText = sk[redacted]]

High

High Secret

Package contains a high-severity secret pattern.

bundled-skills/developer-signup-flow/SKILL.mdView on unpkg · L165

165patternName = stripe_test_secret severity = high line = 165 matchedText = sk[redacted]]

High

Secret Pattern

Stripe test secret key in bundled-skills/developer-signup-flow/SKILL.md

bundled-skills/developer-signup-flow/SKILL.mdView on unpkg · L165

bundled-skills/playwright-skill/run.jsView file

12L13: const fs = require('fs'); L14: const path = require('path');

Medium

Findings

5 High7 Medium6 Low

HighHigh Secretbundled-skills/developer-signup-flow/SKILL.md

HighCredential Exfiltrationbundled-skills/huggingface-tool-builder/references/baseline_hf_api.tsx

HighShips High Entropy Blobbundled-skills/theme-factory/theme-showcase.pdf

HighPayload In Excluded Dirbundled-skills/fedora-hyprland-installer/tests/test-scripts.sh

HighSecret Patternbundled-skills/developer-signup-flow/SKILL.md

MediumDynamic Requirebundled-skills/playwright-skill/run.js

MediumNetwork

MediumEnvironment Vars

MediumShips Build Helperbundled-skills/gemini-deep-research/scripts/research.py

MediumShips Compressed Blobbundled-skills/web-artifacts-builder/scripts/shadcn-components.tar.gz

Medium

Affected versions and remediation

This report applies to opencode-skills-collection@4.0.31.

See all versions of opencode-skills-collection for other recorded verdicts.

Review the evidence and your use of opencode-skills-collection@4.0.31 before allowing it. Restrict the permissions described in this report.
Choose an independently verified alternative or release. This report does not establish that other versions are safe.

Evidence last updated: 2026-08-14 01:04:02.718Z (UTC).

Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.

AI Security Review

Decision evidence

Source & flagged code

Source & flagged code

Findings

Affected versions and remediation

Runtime surface

Behavioral surface

Source & flagged code