registry / opencode-skills-collection / 4.0.74
opencode-skills-collection@4.0.74
OpenCode CLI plugin that automatically downloads and keeps skills up to date.
AI Security Review
scanned 27d ago · by lpm-firewall-aiThe package has no npm install lifecycle and its runtime only copies local skills into its own OpenCode vault when the plugin is loaded. Bundled API helpers authenticate to their named services only when a user runs those scripts.
Static reason
High-risk behavior combination matched malicious policy.
Trigger
OpenCode loads the plugin; bundled helper scripts run only if a user invokes them.
Impact
The user's OpenCode skill vault is populated with the published skill collection. No confirmed compromise or exfiltration path was established.
Mechanism
Local filesystem copy of bundled skills and generation of pointer files, with no network call, credential harvest, or shell execution in dist.
AI rationale
The package has no npm install lifecycle and its runtime only copies local skills into its own OpenCode vault when the plugin is loaded. Bundled API helpers authenticate to their named services only when a user runs those scripts.
Decision evidence
public snapshotAI called this Clean at 84.0% confidence as Benign with medium false-positive risk.
Evidence for AI clean decision
- package.json scripts are only build, test, and prepublishOnly, with no preinstall, install, or postinstall hook and no runtime self-dependency.
- The default export runs only after OpenCode loads the plugin and copies the local bundled-skills tree into the plugin vault and pointer directories.
- Required bundled files are skill text, a PDF showcase, a local installer test, and helper scripts that call their own service APIs when a user runs them.
Evidence against
- On plugin startup the code creates ~/.config/opencode skill-library and pointer directories and removes stale pointer folders it previously created.
- Some bundled skill documents describe offensive techniques, but they are not executed by the package entrypoint.
Behavioral surface
ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
Source & flagged code
10 flagged · loading sourcebundled-skills/developer-signup-flow/SKILL.mdView file
165patternName = stripe_test_secret
severity = high
line = 165
High
High Secret
Package contains a high-severity secret pattern.
bundled-skills/developer-signup-flow/SKILL.mdView on unpkg · L165165patternName = stripe_test_secret
severity = high
line = 165
High
Secret Pattern
Stripe test secret key in bundled-skills/developer-signup-flow/SKILL.md
bundled-skills/developer-signup-flow/SKILL.mdView on unpkg · L165bundled-skills/playwright-skill/run.jsView file
12L13: const fs = require('fs');
L14: const path = require('path');
Medium
Dynamic Require
Findings
1 Critical6 High7 Medium5 Low
CriticalHardcoded Runtime Data Exfiltrationbundled-skills/apify-content-analytics/reference/scripts/run_actor.js
HighHigh Secretbundled-skills/developer-signup-flow/SKILL.md
HighCredential Exfiltrationbundled-skills/huggingface-tool-builder/references/baseline_hf_api.tsx
HighShips High Entropy Blobbundled-skills/theme-factory/theme-showcase.pdf
HighPayload In Excluded Dirbundled-skills/fedora-hyprland-installer/tests/test-scripts.sh
HighSemantic Analysis Limitedbundled-skills/go-in-depth/scripts/workflow-script.js
HighSecret Patternbundled-skills/developer-signup-flow/SKILL.md
MediumDynamic Requirebundled-skills/playwright-skill/run.js
MediumNetwork
MediumEnvironment Vars
Affected versions and remediation
This report applies to opencode-skills-collection@4.0.74.
See all versions of opencode-skills-collection for other recorded verdicts.
- Review the evidence and your use of opencode-skills-collection@4.0.74 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.