skills.rest
yzlin
yzlinCOMMUNITY
Explore all skills by this author →
GitHub

security-scan

Scan OpenCode configurations for security vulnerabilities and misconfigurations using AgentShield.

Updated Mar 11, 2026
Search Tags:#security#vulnerability#configuration#opencode#scan#agent shield
One-click install
npx skills add https://github.com/yzlin/supa-opencode --skill security-scan-yzlin
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/yzlin/supa-opencode/tree/main/skills/security-scan
Command: npx skills add https://github.com/yzlin/supa-opencode --skill security-scan-yzlin

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill safeguards your OpenCode configurations from security vulnerabilities, misconfigurations, and potential injection risks, ensuring a more secure development environment.

Core Features & Use Cases

  • Comprehensive Scanning: Analyzes opencode.json, MCP servers, plugin hooks, and agent definitions for security flaws.
  • Vulnerability Detection: Identifies hardcoded secrets, prompt injection patterns, overly permissive access, and supply chain risks.
  • Use Case: Before deploying a new plugin or committing configuration changes, run this Skill to proactively identify and fix potential security loopholes, preventing breaches and ensuring compliance.

Quick Start

Run a security scan on the current project's OpenCode configuration.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan OpenCode configurations for security vulnerabilities?▼

To scan OpenCode configurations for security vulnerabilities, you can use a tool that analyzes opencode.json, MCP servers, plugin hooks, and agent definitions to identify hardcoded secrets and injection risks.

What security issues can be found in an opencode.json file?▼

Scanning an opencode.json file can reveal security issues such as hardcoded secrets, prompt injection patterns, overly permissive access configurations, and supply chain risks.

Do I need AgentShield installed to scan MCP servers and plugin hooks?▼

Yes, you need AgentShield installed or available via npx to scan MCP servers, plugin hooks, and agent definitions for misconfigurations and potential injection risks.

How does an agent configuration security scan detect prompt injection risks?▼

A configuration security scan detects prompt injection risks by analyzing agent definitions and plugin hooks for malicious patterns that could compromise the development environment.

When should I scan my OpenCode configuration for supply chain risks?▼

You should scan your OpenCode configuration for supply chain risks before deploying a new plugin or committing configuration changes to proactively identify and fix potential security loopholes.

Related Skills

Explore More Legal & Compliance Skills→
KanakMalpaniKanakMalpani

security-scan

Audit Claude Code configurations for security vulnerabilities and misconfigurations using AgentShield.

Community
Intermediate
j7-devj7-dev
19

security-scan

Audit Copilot CLI configurations for security vulnerabilities and misconfigurations.

Community
Advanced
flatrickflatrick
1

security-scan

Audit tool configurations for security vulnerabilities and injection risks using AgentShield.

Community
Intermediate
ZESCODEZESCODE

security-scan

Scan Claude Code configuration files for secrets and misconfigurations.

Community
Advanced