opencode-rs-sdk
Warn
Audited by Socket on Mar 2, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
Overall, the code fragment represents a coherent, well-scoped SDK description for a Unix-only Rust OpenCode HTTP/SSE client/server SDK. There are no clear malicious behaviors, credential harvesting, or exfiltration patterns evident in the specification. The data flows are typical for a client SDK (HTTP requests, SSE streams, management of an external server process) and are proportionate to the stated purpose. Given the static nature of the fragment, the risk is low to moderate (benign with caution). Recommend standard supply-chain best practices: pin dependencies, review crates.io provenance, ensure proper header handling, and validate platform constraints during integration.
Confidence: 75%Severity: 75%
Audit Metadata