registry / opencode-skills-collection / 4.0.62
opencode-skills-collection@4.0.62
OpenCode CLI plugin that automatically downloads and keeps skills up to date.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe package has no registry install hook or confirmed malware behavior, but it automatically mutates an AI-agent skill surface and deletes entries in locations it manages. This warrants a warning for first-party agent extension lifecycle risk rather than a block.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
Loading the plugin during an OpenCode startup.
Impact
The package can change the agent skills made available to OpenCode and delete entries in its managed skill-library and pointer locations.
Mechanism
Automatic agent-skill installation and pointer generation in the OpenCode configuration.
AI rationale
The package has no registry install hook or confirmed malware behavior, but it automatically mutates an AI-agent skill surface and deletes entries in locations it manages. This warrants a warning for first-party agent extension lifecycle risk rather than a block.
Evidence
dist/index.jsdist/skill-pointer/vault-installer.jsdist/skill-pointer/pointer-generator.jsbundled-skills~/.config/opencode/skill-libraries~/.config/opencode/skills
Decision evidence
public snapshotAI called this Suspicious at 89.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The plugin runs its skill-installation pipeline whenever OpenCode starts.
- The pipeline deletes vault entries not present in its bundled index, then replaces skill directories from the package.
- It writes generated pointer SKILL.md files into OpenCode's active skills directory, affecting the agent's available instructions.
Evidence against
- package.json has only a prepublishOnly hook, so registry installation does not run package code.
- The inspected network-and-token examples require an explicit command and send requests only to their named service APIs.
- No self-dependency, import-time network request, or automatic credential harvesting was found in the inspected runtime code.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsEvalFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
10 flagged · loading sourcebundled-skills/developer-signup-flow/SKILL.mdView file
165patternName = stripe_test_secret
severity = high
line = 165
High
High Secret
Package contains a high-severity secret pattern.
bundled-skills/developer-signup-flow/SKILL.mdView on unpkg · L165165patternName = stripe_test_secret
severity = high
line = 165
High
Secret Pattern
Stripe test secret key in bundled-skills/developer-signup-flow/SKILL.md
bundled-skills/developer-signup-flow/SKILL.mdView on unpkg · L165bundled-skills/playwright-skill/run.jsView file
12L13: const fs = require('fs');
L14: const path = require('path');
Medium
Dynamic Require
Findings
1 Critical6 High7 Medium6 Low
CriticalHardcoded Runtime Data Exfiltrationbundled-skills/apify-content-analytics/reference/scripts/run_actor.js
HighHigh Secretbundled-skills/developer-signup-flow/SKILL.md
HighCredential Exfiltrationbundled-skills/huggingface-tool-builder/references/baseline_hf_api.tsx
HighShips High Entropy Blobbundled-skills/theme-factory/theme-showcase.pdf
HighPayload In Excluded Dirbundled-skills/fedora-hyprland-installer/tests/test-scripts.sh
HighSemantic Analysis Limitedbundled-skills/go-in-depth/scripts/workflow-script.js
HighSecret Patternbundled-skills/developer-signup-flow/SKILL.md
MediumDynamic Requirebundled-skills/playwright-skill/run.js
MediumNetwork
MediumEnvironment Vars
Affected versions and remediation
This report applies to opencode-skills-collection@4.0.62.
See all versions of opencode-skills-collection for other recorded verdicts.
- Review the evidence and your use of opencode-skills-collection@4.0.62 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.