registry / opencode-skills-collection / 4.0.65
opencode-skills-collection@4.0.65
OpenCode CLI plugin that automatically downloads and keeps skills up to date.
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThis OpenCode plugin copies a large bundled skill vault, including offensive pentest skills, into the user's OpenCode config when the plugin loads. There is no npm install hook and no plugin-runtime theft, so this is first-party agent extension setup that should be warned, not blocked.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
The user installs this package as an OpenCode plugin and starts OpenCode.
Impact
The OpenCode agent gains a large extra skill library, including offensive pentest workflows, without any npm install hook.
Mechanism
Copies bundled skills into OpenCode config directories and writes pointer skill files.
AI rationale
This OpenCode plugin copies a large bundled skill vault, including offensive pentest skills, into the user's OpenCode config when the plugin loads. There is no npm install hook and no plugin-runtime theft, so this is first-party agent extension setup that should be warned, not blocked.
Evidence
dist/index.jsdist/skill-pointer/index.jsdist/skill-pointer/vault-installer.jsdist/skill-pointer/pointer-generator.jsdist/skill-pointer/config-loader.jsskills_index.json~/.config/opencode/skill-libraries~/.config/opencode/skills~/.config/opencode/skill-filter.jsonc
Decision evidence
public snapshotAI called this Suspicious at 84.0% confidence as Dangerous Capability with medium false-positive risk.
Evidence for warning
- On OpenCode plugin load, the package copies bundled skills into the user OpenCode vault and writes pointer skill files under the OpenCode skills directory.
- The default filter excludes no risk levels, so offensive skills such as pentest-tools are installed unless the user adds a filter file.
- This is first-party OpenCode plugin setup that mutates OpenCode agent skill files on every OpenCode startup.
Evidence against
- package.json has no preinstall, install, or postinstall hook; only a prepublishOnly TypeScript build.
- Plugin runtime has no network, child_process, or eval; it only copies local bundled files into OpenCode-owned paths.
- Pointer writes are limited to folders ending in -category-pointer and do not overwrite user custom skills.
- High scanner hits are user-run skill helpers calling vendor APIs such as api.apify.com and huggingface.co, plus a bash test file and a PDF, not hidden theft.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVars
Source & flagged code
10 flagged · loading sourcebundled-skills/developer-signup-flow/SKILL.mdView file
165patternName = stripe_test_secret
severity = high
line = 165
High
High Secret
Package contains a high-severity secret pattern.
bundled-skills/developer-signup-flow/SKILL.mdView on unpkg · L165165patternName = stripe_test_secret
severity = high
line = 165
High
Secret Pattern
Stripe test secret key in bundled-skills/developer-signup-flow/SKILL.md
bundled-skills/developer-signup-flow/SKILL.mdView on unpkg · L165bundled-skills/playwright-skill/run.jsView file
12L13: const fs = require('fs');
L14: const path = require('path');
Medium
Dynamic Require
Findings
1 Critical6 High7 Medium6 Low
CriticalHardcoded Runtime Data Exfiltrationbundled-skills/apify-content-analytics/reference/scripts/run_actor.js
HighHigh Secretbundled-skills/developer-signup-flow/SKILL.md
HighCredential Exfiltrationbundled-skills/huggingface-tool-builder/references/baseline_hf_api.tsx
HighShips High Entropy Blobbundled-skills/theme-factory/theme-showcase.pdf
HighPayload In Excluded Dirbundled-skills/fedora-hyprland-installer/tests/test-scripts.sh
HighSemantic Analysis Limitedbundled-skills/go-in-depth/scripts/workflow-script.js
HighSecret Patternbundled-skills/developer-signup-flow/SKILL.md
MediumDynamic Requirebundled-skills/playwright-skill/run.js
MediumNetwork
MediumEnvironment Vars
Affected versions and remediation
This report applies to opencode-skills-collection@4.0.65.
See all versions of opencode-skills-collection for other recorded verdicts.
- Review the evidence and your use of opencode-skills-collection@4.0.65 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.