Flagged: sudo usage. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by wesammustafa · MCP Server · ★ 267
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is OpenCode-Everything-You-Need-to-Know safe to install? View the security audit →
OpenCode: Everything You Need to Know A practical guide to OpenCode — from your first prompt to custom agents, skills, plugins, and MCP integrations. Built around clear mental models and real examples, not marketing. Who this is for: Developers using (or about to use) OpenCode. Beginners get a guided path; power users get depth on Custom Commands, Skills, Plugins, MCP, and Agents. ⚖️ Not affiliated with the OpenCode team. This is a community-maintained guide. For canonical sources, check opencode.ai/docs and github.com/anomalyco/opencode. 🧭 Choose your path Custom Commands · Skills
| Stars | 267 |
| Forks | 15 |
| Language | JavaScript |
| Category | MCP Server |
| License | MIT |
| Quality Score | 67.6421908497872/100 |
| Open Issues | 2 |
| Last Updated | 2026-06-08 |
| Created | 2026-02-26 |
| Platforms | mcp, node |
| Est. Tokens | ~34k |
Explore other popular mcp server tools:
OpenCode-Everything-You-Need-to-Know is The ultimate all-in-one guide to mastering OpenCode. From installation, Zen model router setup, TUI mastery, commands, skills, agents, workflows, automation, and integrations, to MCP servers, plugins,. It is categorized as a MCP Server with 267 GitHub stars.
OpenCode-Everything-You-Need-to-Know is primarily written in JavaScript.
You can find installation instructions and usage details in the OpenCode-Everything-You-Need-to-Know GitHub repository at github.com/wesammustafa/OpenCode-Everything-You-Need-to-Know. The project has 267 stars and 15 forks, indicating an active community.
OpenCode-Everything-You-Need-to-Know is released under the MIT license, making it free to use and modify according to the license terms.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: