registry / opencode-skills-collection / 4.0.32
opencode-skills-collection@4.0.32
OpenCode CLI plugin that automatically downloads and keeps skills up to date.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiThe package automatically changes OpenCode's skill surface at runtime, warranting a warning under the agent-extension lifecycle policy. No concrete malicious or exfiltration behavior was established.
Static reason
One or more suspicious static signals were detected.
Trigger
OpenCode startup after the plugin is installed/enabled
Impact
Adds a large bundled skill collection to the agent's discoverable instruction surface and replaces stale managed entries.
Mechanism
copies bundled skills and writes managed OpenCode pointer skills
AI rationale
The package automatically changes OpenCode's skill surface at runtime, warranting a warning under the agent-extension lifecycle policy. No concrete malicious or exfiltration behavior was established.
Evidence
package.jsondist/index.jsdist/skill-pointer/index.jsdist/skill-pointer/vault-installer.jsdist/skill-pointer/pointer-generator.jsbundled-skills/playwright-skill/run.js~/.config/opencode/skill-libraries/**~/.config/opencode/skills/*-category-pointer/SKILL.mdbundled-skills/**
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- Plugin runs its setup path on every OpenCode startup.
- It copies bundled skills into ~/.config/opencode/skill-libraries and creates active skill pointers.
- Startup synchronizes/removes its managed vault and pointer directories.
- Bundled Playwright executor can install dependencies and execute caller-provided code, but only when explicitly run.
Evidence against
- package.json has no npm install/preinstall/postinstall hook.
- No package-runtime credential harvesting, remote payload fetch, or exfiltration was found.
- Playwright execution is an explicit skill command, not import-time behavior.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsUrlStrings
WildcardDependency
Source & flagged code
8 flagged · loading sourcebundled-skills/developer-signup-flow/SKILL.mdView file
165patternName = stripe_test_secret
severity = high
line = 165
matchedText = sk[redacted]]
High
High Secret
Package contains a high-severity secret pattern.
bundled-skills/developer-signup-flow/SKILL.mdView on unpkg · L165165patternName = stripe_test_secret
severity = high
line = 165
matchedText = sk[redacted]]
High
Secret Pattern
Stripe test secret key in bundled-skills/developer-signup-flow/SKILL.md
bundled-skills/developer-signup-flow/SKILL.mdView on unpkg · L165bundled-skills/playwright-skill/run.jsView file
12L13: const fs = require('fs');
L14: const path = require('path');
Medium
Findings
5 High7 Medium6 Low
HighHigh Secretbundled-skills/developer-signup-flow/SKILL.md
HighCredential Exfiltrationbundled-skills/huggingface-tool-builder/references/baseline_hf_api.tsx
HighShips High Entropy Blobbundled-skills/theme-factory/theme-showcase.pdf
HighPayload In Excluded Dirbundled-skills/fedora-hyprland-installer/tests/test-scripts.sh
HighSecret Patternbundled-skills/developer-signup-flow/SKILL.md
MediumDynamic Requirebundled-skills/playwright-skill/run.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperbundled-skills/gemini-deep-research/scripts/research.py
MediumShips Compressed Blobbundled-skills/web-artifacts-builder/scripts/shadcn-components.tar.gz
Medium
Affected versions and remediation
This report applies to opencode-skills-collection@4.0.32.
See all versions of opencode-skills-collection for other recorded verdicts.
- Review the evidence and your use of opencode-skills-collection@4.0.32 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.