check-opencode-updates
Pass
Audited by Gen Agent Trust Hub on Mar 19, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script fetches version metadata and release notes from GitHub's official API (
api.github.com/repos/anomalyco/opencode/releasesandapi.github.com/repos/code-yeongyu/oh-my-openagent/releases). These are informational requests to well-known repositories. - [COMMAND_EXECUTION]: The skill executes
opencode --versionandbunx oh-my-opencode-linux-x64 --versionusingsubprocess.runto determine the installed versions. These commands are static and limited to version identification. - [PROMPT_INJECTION]: The skill instructions in
SKILL.mddefine clear triggers for version checking and update information. It does not contain instructions to bypass safety filters or ignore prior rules. - [DATA_EXFILTRATION]: No sensitive local files or environment variables are accessed or transmitted. Network activity is restricted to retrieving public release information from GitHub.
Audit Metadata