opencode-delegate

SUSPICIOUS: the skill is mostly aligned with its stated purpose, but it delegates coding to an external authenticated CLI with auto-approved write actions and optional curl|bash installation. Data flows appear consistent with OpenCode’s official ecosystem rather than a credential-harvesting proxy, so this is not clearly malicious; the main concerns are supply-chain trust, credential forwarding to the CLI, and unattended repository modification.