opencode-session-toolkit-cn

读取本地 OpenCode SQLite 数据库，支持跨目录会话查询、消息检查与 Markdown 导出。

What to check before installing/use: 1) Confirm the `opencode` CLI is installed and accessible in PATH (SKILL.md and the script call `opencode db path`)—the skill metadata did not declare this required binary. 2) The SKILL.md examples use the `sqlite3` CLI and `column` for display; these are optional but useful—install them if you plan to run the shell examples. 3) The included Python script opens the DB read-only and sanitizes filenames, but it will write Markdown files to whatever --output-dir you provide—run it on a copy or in a safe test directory first. 4) The script's shebang references a nonstandard runner ("uv run --script"); if that runner is not present, run the script explicitly with a supported Python (it documents requires-python >=3.11). 5) Inspect the script yourself (it is short and local) to confirm it meets your expectations—there are no network calls, but session/message contents can contain sensitive data, so exported Markdown may include secrets. 6) Because registry metadata omitted the `opencode` binary requirement, treat that as a documentation bug; demand the author add required-binaries to the skill manifest or verify the environment before use.

Type: OpenClaw Skill Name: opencode-session-toolkit-cn Version: 1.0.1 The opencode-session-toolkit is a legitimate utility designed to query and export local OpenCode SQLite database sessions to Markdown. It employs security best practices such as using read-only mode for database connections (sqlite3 -readonly and URI mode=ro) and sanitizing filenames to prevent directory traversal in scripts/export_opencode_sessions.py. No evidence of data exfiltration, unauthorized network access, or malicious prompt injection was found.