No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by whut09 · MCP Server · ★ 111
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is opencode-plusplus safe to install? View the security audit →
OpenCode++ 中文 | English 为 OpenCode 增加上下文、边界、证据、验证与修复闭环的可靠性增强层。 OpenCode++ 不是 OpenCode 官方项目，也不替代 OpenCode。OpenCode 负责聊天、读代码、改代码、跑命令；OpenCode++ 负责上下文增强、编辑边界、命令证据、策略门禁、影响分析和修复/完成决策报告。 30 秒开始 当前 还没有发布到 npm，所以不能直接执行 。现在请从源码安装 OpenCode++，并把 命令链接到全局： 然后进入你要使用 OpenCode++ 的目标代码仓库： 发布到 npm 之后，安装命令会简化为： 然后像使用 OpenCode 一样聊天： OpenCode++ 会在外层安静运行： 初始化并增量刷新仓库上下文 检查编辑边界 阻断危险命令和幻觉命令 在执行前阻断 protected / secret path 记录 sidecar 事件、命令结果和验证证据 OpenCode 空闲且有 dirty diff 时执行增量验证 复用 contracts / hallucination / regression / impact / tests / policy Guard 栈 输出影响范围、回归风险和最新验证报告 默认不打断聊天，只有发现 blocker 时才提醒。 日常命令 会执行 preflight，确保 ，写入 ，准备 OpenCode comman
| Stars | 111 |
| Forks | 12 |
| Language | TypeScript |
| Category | MCP Server |
| License | MIT |
| Quality Score | 62.3446684860978/100 |
| Last Updated | 2026-09-09 |
| Created | 2026-05-24 |
| Platforms | cli, mcp, node |
| Est. Tokens | ~15k |
These tools work well together with opencode-plusplus for enhanced workflows:
Looking for a opencode-plusplus alternative? If you're comparing opencode-plusplus with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
Cut AI context cost without trusting the compressor. Every reduction is reversible, byte-exact recoverable, an
MCP Toolkit for Flutter AI Agent Driven Development (MCP/CLI + custom client side tools) - via closed feedback
The governed runtime for Python agents you can let act: policy on every action, durable runs, sandboxes, budge
A ReAct-Based Highly Robust Autonomous Agent (Harness) Framework.
MCP server for OpenCode AI — 70 tools, 10 resources, 5 prompts. Use npx opencode-mcp with Claude Desktop, Clau
Explore other popular mcp server tools:
opencode-plusplus is OpenCode++: a Coding Agent Reliability Harness for OpenCode, adding context, edit boundaries, command evidence, verification gates, impact analysis, and repair loops.OpenCode++：面向 OpenCode 的 AI 编程可靠性增. It is categorized as a MCP Server with 111 GitHub stars.
opencode-plusplus is primarily written in TypeScript. It covers topics such as agent, code-agent, code-agent-cli.
You can find installation instructions and usage details in the opencode-plusplus GitHub repository at github.com/whut09/opencode-plusplus. The project has 111 stars and 12 forks, indicating an active community.
opencode-plusplus is released under the MIT license, making it free to use and modify according to the license terms.
The top alternatives to opencode-plusplus on Agent Skills Hub include entroly, mcp_flutter, omnicoreagent. Each offers a different approach to the same problem space — compare them side-by-side by stars, quality score, and community activity.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: