registry / opencode-skills-collection / 4.0.46
opencode-skills-collection@4.0.46
OpenCode CLI plugin that automatically downloads and keeps skills up to date.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiScanner labels of credential theft and hidden payloads do not match the source: vendor API helpers, a test shell script, and skill assets, with no install-time execution. The remaining issue is first-party OpenCode plugin setup that auto-provisions a large skill vault, including offensive skills, which is a warn-level agent extension risk rather than a publish block.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The user enables this package as an OpenCode plugin, then starts OpenCode.
Impact
OpenCode can load a large third-party skill library, including offensive pentest content, without a further install hook.
Mechanism
Plugin startup copies bundled skills into the OpenCode skill vault and writes category pointer files
AI rationale
Scanner labels of credential theft and hidden payloads do not match the source: vendor API helpers, a test shell script, and skill assets, with no install-time execution. The remaining issue is first-party OpenCode plugin setup that auto-provisions a large skill vault, including offensive skills, which is a warn-level agent extension risk rather than a publish block.
Evidence
dist/index.jsdist/skill-pointer/vault-installer.jsdist/skill-pointer/pointer-generator.jsdist/skill-pointer/config-loader.jsbundled-skills/pentest-tools/SKILL.md~/.config/opencode/skill-libraries~/.config/opencode/skillsbundled-skillsskills_index.json
Decision evidence
public snapshotAI called this Suspicious at 82.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- On OpenCode startup the plugin copies bundled skills into the home OpenCode skill vault and writes pointer skill files under the OpenCode skills directory.
- Default filter config excludes no risk levels, so offensive and critical skills are installed unless the user adds a filter file.
- The bundled collection includes offensive pentest skills with exploit and payload documentation.
- The vault installer force-copies skill folders and deletes vault entries that are not in the current index.
Evidence against
- package.json has no preinstall, install, or postinstall hook; the only extra script is a publish-time TypeScript build.
- Compiled plugin code does not use network, eval, or child_process.
- Pointer writes are limited to category-pointer folders and do not overwrite user custom skills.
- Flagged Apify and Hugging Face helpers send user tokens only to those vendors' official APIs when a skill is run.
- High scanner hits on a Fedora installer test script and binary skill assets are not hidden malware payloads.
Behavioral surface
Source & flagged code
10 flagged · loading sourcebundled-skills/developer-signup-flow/SKILL.mdView file
165patternName = stripe_test_secret
severity = high
line = 165
High
High Secret
Package contains a high-severity secret pattern.
bundled-skills/developer-signup-flow/SKILL.mdView on unpkg · L165165patternName = stripe_test_secret
severity = high
line = 165
High
Secret Pattern
Stripe test secret key in bundled-skills/developer-signup-flow/SKILL.md
bundled-skills/developer-signup-flow/SKILL.mdView on unpkg · L165bundled-skills/playwright-skill/run.jsView file
12L13: const fs = require('fs');
L14: const path = require('path');
Medium
Dynamic Require
Findings
1 Critical6 High7 Medium6 Low
CriticalHardcoded Runtime Data Exfiltrationbundled-skills/apify-content-analytics/reference/scripts/run_actor.js
HighHigh Secretbundled-skills/developer-signup-flow/SKILL.md
HighCredential Exfiltrationbundled-skills/huggingface-tool-builder/references/baseline_hf_api.tsx
HighShips High Entropy Blobbundled-skills/theme-factory/theme-showcase.pdf
HighPayload In Excluded Dirbundled-skills/fedora-hyprland-installer/tests/test-scripts.sh
HighSemantic Analysis Limitedbundled-skills/go-in-depth/scripts/workflow-script.js
HighSecret Patternbundled-skills/developer-signup-flow/SKILL.md
MediumDynamic Requirebundled-skills/playwright-skill/run.js
MediumNetwork
MediumEnvironment Vars
Affected versions and remediation
This report applies to opencode-skills-collection@4.0.46.
See all versions of opencode-skills-collection for other recorded verdicts.
- Review the evidence and your use of opencode-skills-collection@4.0.46 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.