opencode-conversation-recall
Fail
Audited by Socket on Mar 7, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The skill is functionally aligned with its stated purpose of recalling and displaying past OpenCode conversations from a local SQLite store. Its security footprint is low overall, with benign data access and no external network activity. The primary concern is potential SQL injection via unsafely parameterized search terms and ensuring proper isolation in multi-user environments to prevent unintended data exposure. No credential handling, exfiltration, or autonomous actions are present. Treat as benign with a documented precaution to parameterize queries and secure access to the local database.
Confidence: 98%
Audit Metadata