developing-opencode-plugins
Facilitates the development of OpenCode plugins and skills, streamlining workflows for creating, modifying, and releasing them.
Install this skill
or
68/100
Security score
The developing-opencode-plugins skill was audited on Jun 14, 2026 and we found 8 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 101
Access to hidden dotfiles in home directory
SourceSKILL.md
| 101 | **Global** (`~/.config/opencode/skills/my-skill/SKILL.md`): |
medium line 116
Access to hidden dotfiles in home directory
SourceSKILL.md
| 116 | - `~/.agents/skills/<name>/SKILL.md` |
medium line 117
Access to hidden dotfiles in home directory
SourceSKILL.md
| 117 | - `~/.claude/skills/<name>/SKILL.md` |
medium line 183
Access to hidden dotfiles in home directory
SourceSKILL.md
| 183 | OpenCode runs `bun install` automatically for npm packages; cached in `~/.cache/opencode/node_modules/`. |
medium line 191
Access to hidden dotfiles in home directory
SourceSKILL.md
| 191 | Custom commands are markdown files in `.opencode/command/` or `~/.config/opencode/command/`: |
medium line 235
Access to hidden dotfiles in home directory
SourceSKILL.md
| 235 | 5. **Global config is `~/.config/opencode/`** — NOT `~/.opencode/` (that's legacy) |
low line 107
External URL reference
SourceSKILL.md
| 107 | "$schema": "https://opencode.ai/config.json", |
low line 110
External URL reference
SourceSKILL.md
| 110 | "urls": ["https://example.com/.well-known/skills/"] |
Scanned on Jun 14, 2026
View Security Dashboard