Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed OpenCode model speed benchmark that makes limited network calls and prints results without saving data or changing the system.
Install this only if you are comfortable with the skill contacting opencode.ai to fetch model documentation and run benchmark prompts. It does not require an API key and does not appear to access local private data, but its user-facing text is primarily Chinese and it lacks a separate machine-readable network permission declaration.
The skill instructs the agent to perform live network access to external endpoints and scrape model lists, but it does not declare any explicit tool scope or allowed-tools/permissions metadata. This weakens policy enforcement and reviewability, because a consumer cannot easily tell that the skill requires outbound network access or constrain it to the intended domains.
The top-level docstring presents the skill entirely in Chinese, which is a natural-language locale constraint visible to users and operators. There is no indication that the skill is region-specific or that users can opt into another language, which can conflict with language/locale choice policies.
