OpenCode Game Builder

Spawn OpenCode as an ACP (Agent Client Protocol) subagent for complex coding tasks. Use when building games, web apps, multi-file projects, or when the user...

This skill appears to be a legitimate coding subagent, but there are important mismatches and risks to consider before installing: - Source verification: there's no homepage or known source. Verify the OpenCode implementation (official repo or vendor) before trusting it. - Secrets and API keys: the documentation expects provider API keys but none are declared in the metadata. Do not put secrets in paths you allow the subagent to use; prefer scoped service accounts or ephemeral keys. - Filesystem exposure: the subagent can read/write files and run shell commands. When testing, use an isolated project directory (not your home or repositories containing credentials). - Session sharing / external links: the skill advertises shareable session links but doesn't name the hosting/service. Assume sharing may transmit code off-host; avoid using share features with proprietary code unless you confirm where shares go and how they are secured. - Operational controls: if possible, restrict autonomous invocation, review spawned subagent activity, and audit any created network endpoints. Ask the publisher for source code, a reproducible install, and details on session-sharing endpoints and privacy practices. If you can't verify the source and behavior, run OpenCode only from a trusted upstream repo or in a sandboxed environment. If you decide to proceed, monitor file and network activity and avoid exposing secrets.

Type: OpenClaw Skill Name: opencode-games Version: 1.0.0 The skill bundle integrates an external subagent called 'OpenCode' for complex coding tasks and game development. While the instructions in SKILL.md are aligned with its stated purpose, the skill explicitly grants the subagent high-risk capabilities, including full file system access, shell command execution, and network access (via 'opencode serve' and AI providers). Per the analysis criteria, these broad permissions are classified as suspicious because they represent a significant attack surface, even though they are plausibly necessary for a coding agent. No evidence of intentional malice, data exfiltration, or harmful prompt injection was found in SKILL.md or _meta.json.