Security audit
OpenCode Zen OpenClaw provider
Security checks for vulnerabilities and agentic risk
Overview
The package coherently provides OpenCode model access and session browsing, with disclosed controls for its sensitive features.
Session browsing can expose private transcripts and tool output within OpenClaw. Disable sessionCatalog.enabled if unwanted, and review a session before importing or resuming it. Model requests use your OpenCode credentials and may incur charges; see [OpenCode documentation](https://opencode.ai/v2/docs/console/models/). SkillSpector was not applicable, so this verdict rests on independent artifact review.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.