mirror of
https://github.com/Heretek-AI/awesome-opencode.git
synced 2026-11-07 10:45:57 -10:00
John SmithandClaude Opus 5.5
3a6d104fcf
- kind/topics: keyword first pass, then reviewed and corrected by hand for all 513 entries - compat: detected from npm packages, package.json and source (scripts/utils/compat.js). Plugins: 134 v2, 125 v1, 12 unverified; 13 entries the review loop marked V2 pin @opencode-ai/plugin 1.x, and ~20 loop V2 verdicts based only on the absence of V1 markers are V1 plugin functions in source - npm and path filled where verifiable (package repository matches the entry); 9 bogus npm values from install prose were not kept - 29 repo URLs updated to the renamed/transferred repository; xberg-io entries point at their live repos instead of the archived monorepo; lavi uses repo + path instead of a /tree/ URL - removed projects/opencode-sessions.yaml (same repo as plugins/opencode-sessions.yaml) - install: renamed to installation:, mojibake fixed, inline HTML links removed from two descriptions Co-Authored-By: Claude Opus 5.5 <[email protected]>
34 lines
1.1 KiB
YAML
34 lines
1.1 KiB
YAML
name: OpenCode Seatbelt
|
|
repo: https://github.com/ssmirr/opencode-seatbelt
|
|
npm: opencode-seatbelt
|
|
tagline: macOS kernel sandbox that blocks agents from reading secrets via .ocignore
|
|
description: Applies a macOS Seatbelt profile to the OpenCode process the moment the plugin loads, so every tool and child process (read, glob, grep, the shell, MCP servers, custom tools) is confined by the kernel. Patterns from .ocignore plus a built-in secret baseline are compiled to syscall-level rules instead of being matched against command text, so "tail" instead of "cat", symlinks, hardlinks, base64 and interpreters are all covered, and rename/unlink of protected files is blocked too. Requires macOS and OpenCode v2.
|
|
kind: plugin
|
|
topics:
|
|
- security
|
|
compat: v2
|
|
scope:
|
|
- global
|
|
- project
|
|
tags:
|
|
- security
|
|
- sandbox
|
|
- macos
|
|
- secrets
|
|
min_version: 2.0.0
|
|
installation: |
|
|
Install from npm:
|
|
|
|
```sh
|
|
opencode plugin add opencode-seatbelt
|
|
```
|
|
|
|
Or add it to `opencode.json(c)` yourself:
|
|
|
|
```jsonc
|
|
{
|
|
"$schema": "https://opencode.ai/config.json",
|
|
"plugins": ["opencode-seatbelt"]
|
|
}
|
|
```
|