registry / opencode-skills-collection / 4.0.40
opencode-skills-collection@4.0.40
OpenCode CLI plugin that automatically downloads and keeps skills up to date.
AI Security Review
scanned 2mo ago · by lpm-firewall-aiNo concrete malicious behavior, install hook, credential theft, or unconsented remote execution was found. The automatic mutation of an AI-agent skills surface is a real package-owned extension lifecycle risk and warrants warning rather than blocking.
Static reason
One or more suspicious static signals were detected.
Trigger
Loading the package as an OpenCode plugin during OpenCode startup.
Impact
Adds package-provided agent instructions and removes stale entries in its managed vault/pointer namespaces.
Mechanism
Copies bundled skills and rewrites managed OpenCode skill-pointer directories.
AI rationale
No concrete malicious behavior, install hook, credential theft, or unconsented remote execution was found. The automatic mutation of an AI-agent skills surface is a real package-owned extension lifecycle risk and warrants warning rather than blocking.
Evidence
dist/index.jsdist/skill-pointer/vault-installer.jsdist/skill-pointer/pointer-generator.jspackage.jsonbundled-skills/playwright-skill/run.jsdist/skill-pointer/index.jsbundled-skills/huggingface-tool-builder/references/baseline_hf_api.tsx
Decision evidence
public snapshotAI called this Suspicious at 90.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- OpenCode startup creates ~/.config/opencode/skills and runs the skill-pointer pipeline.
- The pipeline deletes stale managed vault/category entries, copies bundled skills, and rewrites generated pointer SKILL.md files.
- Bundled playwright executor installs dependencies and executes supplied code only when explicitly run.
Evidence against
- package.json has no preinstall, install, or postinstall hook.
- Root plugin source has no network, credential collection, or remote-payload execution.
- HF_TOKEN request is a documented standalone example to huggingface.co, not plugin startup behavior.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsUrlStrings
WildcardDependency
Source & flagged code
8 flagged · loading sourcebundled-skills/developer-signup-flow/SKILL.mdView file
165patternName = stripe_test_secret
severity = high
line = 165
matchedText = sk[redacted]]
High
High Secret
Package contains a high-severity secret pattern.
bundled-skills/developer-signup-flow/SKILL.mdView on unpkg · L165165patternName = stripe_test_secret
severity = high
line = 165
matchedText = sk[redacted]]
High
Secret Pattern
Stripe test secret key in bundled-skills/developer-signup-flow/SKILL.md
bundled-skills/developer-signup-flow/SKILL.mdView on unpkg · L165bundled-skills/playwright-skill/run.jsView file
12L13: const fs = require('fs');
L14: const path = require('path');
Medium
Findings
5 High7 Medium6 Low
HighHigh Secretbundled-skills/developer-signup-flow/SKILL.md
HighCredential Exfiltrationbundled-skills/huggingface-tool-builder/references/baseline_hf_api.tsx
HighShips High Entropy Blobbundled-skills/theme-factory/theme-showcase.pdf
HighPayload In Excluded Dirbundled-skills/fedora-hyprland-installer/tests/test-scripts.sh
HighSecret Patternbundled-skills/developer-signup-flow/SKILL.md
MediumDynamic Requirebundled-skills/playwright-skill/run.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperbundled-skills/gemini-deep-research/scripts/research.py
MediumShips Compressed Blobbundled-skills/web-artifacts-builder/scripts/shadcn-components.tar.gz
Medium
Affected versions and remediation
This report applies to opencode-skills-collection@4.0.40.
See all versions of opencode-skills-collection for other recorded verdicts.
- Review the evidence and your use of opencode-skills-collection@4.0.40 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.