跳到主要内容
知仓学习社ZHICANG

opencode-delegation

Delegates tasks to OpenCode (opencode run) via delegation-core. Use when delegation-core selects OpenCode or a provider-agnostic harness is wanted.

读凭据严重 1 · 高危 0athola/claude-night-market

它会碰到什么

扫了多少1 个文本文件,4 KB
它会碰到什么读凭据
命中总数1 处
命中统计严重 1 · 高 0 · 中 0 · 低 0
逐条看命中(1 条严重或高危)
  • 严重 SKILL.md:77cred-paths
    `ANTHROPIC_API_KEY` or `OPENAI_API_KEY`, through a `.env` file, or

这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。

技能内容

Table of Contents

  • [Overview](#overview)
  • [When To Use](#when-to-use)
  • [When NOT To Use](#when-not-to-use)
  • [Prerequisites](#prerequisites)
  • [Quick Start](#quick-start)
  • [Smart Delegation](#smart-delegation)
  • [OpenCode-Specific Details](#opencode-specific-details)
  • [Exit Criteria](#exit-criteria)

OpenCode Delegation

Overview

OpenCode is an open-source, provider-agnostic terminal agent published

as npm opencode-ai. Its scripting entry point is opencode run,

which takes the prompt as positional arguments.

Being provider-agnostic makes it the most flexible entry in the

registry: the model behind it is whatever the local OpenCode config

selects, including a local one.

When To Use

  • delegation-core selected opencode for the task
  • A provider the registry does not model directly is wanted, and

OpenCode already has it configured

  • A local or self-hosted model should serve the request

When NOT To Use

  • No provider credentials are configured. opencode auth list shows

what is present

  • A specific model must be pinned from this side. Model choice belongs

to OpenCode's own config, not to the delegation call

Prerequisites

Installation

npm install -g opencode-ai@latest

Homebrew, pnpm, bun, scoop and chocolatey are also documented

upstream.

Authentication

Credentials resolve per provider through environment variables such as

ANTHROPIC_API_KEY or OPENAI_API_KEY, through a .env file, or

through opencode auth login. Stored credentials are written to

~/.local/share/opencode/auth.json, and the config file supports

{env:VARIABLE_NAME} interpolation.

Verification runs opencode auth list, because there is no single

variable to check when the provider set is open-ended.

Quick Start

Using the shared delegation executor

uv run python scripts/delegation_executor.py opencode "Find the bug" \
  --files src/

Through the Makefile

make -C plugins/conjure delegate-opencode PROMPT='Find the bug'

Direct CLI usage

opencode run "Explain the use of context in this package"

Smart Delegation

opencode declares the code_execution strength and ranks last among

the network providers in the candidate order, ahead only of the local

glimmer service. It declares no model ids, since model choice

belongs to OpenCode's own configuration.

OpenCode-Specific Details

| Property | Value |

|----------|-------|

| Binary | opencode |

| Package | opencode-ai |

| Headless form | opencode run <prompt> |

| Prompt delivery | positional |

| Version probe | opencode --version |

| Auth probe | opencode auth list |

opencode run --file <path> attaches a file upstream, but this

service inlines file context into the prompt instead, which keeps one

delivery path across every provider that lacks an @path syntax.

opencode serve starts a headless HTTP server that `opencode run

--attach <url> can target, and it honors OPENCODE_SERVER_PASSWORD`.

That path is not modeled here: the registry spawns a process per

delegation rather than holding a server.

An output-format flag is documented for the session list, export

and db subcommands, but not confirmed for run, so none is

declared.

Exit Criteria

  • [ ] opencode resolves on PATH and answers opencode --version
  • [ ] opencode auth list shows at least one configured provider
  • [ ] The built command is opencode run <prompt> with the prompt last

and no prompt flag before it

  • [ ] File context was inlined into the prompt rather than passed with

--file

  • [ ] Output saved to delegations/opencode/YYYYMMDD_HHMMSS.md
  • [ ] This skill ran because delegation-core selected opencode

想直接用这个技能?

本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。