OCAE CLI - versioned OpenCode agent ecosystem with 13 governed agents, capability profiles, MCP preflight, source-lock integrity and rollback.
C elevated
- capability exposure inferred + 22
- recent drift inferred + 20
- tool safety inferred + 12
- trust mitigators mixed − 3
inferred mixed
The A–E grade is our heuristic synthesis — a "review this" prompt, not a verdict. Each factor is tagged by what backs it: attested (a verifiable record), reported (a third party's claim), or inferred (our own heuristic, e.g. permissions). See methodology.
grade last moved 2d ago · see ecosystem CVEs →
- C · 43 → C · 51
- B · 19 → C · 43
Inferred surface — each links to servers holding it:
No known CVEs for this server.
- high dangerous code
committed secret: OpenAI key
prompt-surface
shipped agent-instruction files + hidden-content / dangerous-code findings —
quoted from the analyzed source
analyzed commit 45f9393 · analyzer v33 · 2d ago
skills & prompt files 57
- skill Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.agents/skills/coordinate-blackboard-swarm/SKILL.md
- agent-rules Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/agents/approval-coordinator.md
- agent-rules Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/agents/architecture-agent.md
- agent-rules Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/agents/compliance-agent.md
- agent-rules Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/agents/documentation-agent.md
- agent-rules Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/agents/executor.md
- agent-rules Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/agents/frontend-design-agent.md
- agent-rules Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/agents/issue-orchestrator.md
- agent-rules Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/agents/migration-agent.md
- agent-rules Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/agents/playwright-agent.md
- agent-rules Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/agents/research-agent.md
- agent-rules Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/agents/review-agent.md
- agent-rules Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/agents/security-agent.md
- agent-rules Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/agents/ux-review-agent.md
- prompt-file Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/prompts/compliance-check.txt
- prompt-file Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/prompts/funding-generator.txt
- prompt-file Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/prompts/migration-review.txt
- prompt-file Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/prompts/security-review.txt
- prompt-file Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/prompts/spec-constitution.txt
- prompt-file Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/prompts/spec-implement.txt
- prompt-file Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/prompts/spec-plan.txt
- prompt-file Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/prompts/spec-specify.txt
- prompt-file Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/prompts/spec-tasks.txt
- prompt-file Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/prompts/visual-review.txt
- skill Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/skills/anti-fake-execution/SKILL.md
- skill Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/skills/architecture-review/SKILL.md
- skill Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/skills/audit-trail-enforcer/SKILL.md
- skill Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/skills/checkpoint-and-rollback/SKILL.md
- skill Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/skills/context-engineering/SKILL.md
- skill Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/skills/frontend-design-build/SKILL.md
- skill Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/skills/funding-document-generator/SKILL.md
- skill Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/skills/github-source-of-truth/SKILL.md
- skill Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/skills/hermes-handoff/SKILL.md
- skill Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/skills/living-truth-mirror/SKILL.md
- skill Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/skills/mcp-selection/SKILL.md
- skill Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/skills/migration-review/SKILL.md
- skill Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/skills/owner-approval-gate/SKILL.md
- skill Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/skills/playwright-visual-review/SKILL.md
- skill Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/skills/privacy-data-minimization/SKILL.md
- skill Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/skills/project-bootstrap/SKILL.md
- skill Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/skills/project-reality-refresh/SKILL.md
- skill Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/skills/provider-neutral-config/SKILL.md
- skill Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/skills/read-before-sketch/SKILL.md
- skill Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/skills/remote-ci-approval-gate/SKILL.md
- skill Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/skills/risk-tier-routing/SKILL.md
- skill Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/skills/run-card/SKILL.md
- skill Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/skills/security-evidence-gate/SKILL.md
- skill Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/skills/spec-driven-development/SKILL.md
- skill Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/skills/test-enforcement/SKILL.md
- skill Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/skills/tierheim-compliance/SKILL.md
- skill Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/skills/ui-design-system-review/SKILL.md
- skill Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/skills/ux-flow-review/SKILL.md
- skill Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/skills/verification-contract/SKILL.md
- skill Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/.opencode/skills/worktree-safety/SKILL.md
- agent-rules Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/AGENTS.md
- skill Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/coordinate-blackboard-swarm.zip!/coordinate-blackboard-swarm/SKILL.md
- agent-rules Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/test/fixtures/bootstrap/existing-agents/AGENTS.md
danger signals2
- committed secret OpenAI key Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/evidence/real-worker-soak-repeat/sessions/rw-01-isolated-bugfix/worker-artifacts/research.json :4
sk-6c0…(35 chars, redacted) - committed secret OpenAI key Mueller-Systems-Lab-OpenCode-Agenten-Oekosystem-45f9393/test/routing/observability.test.mjs :87
sk-sup…(24 chars, redacted)
- recent drift +20 capability drift →
[](https://mcpobservatory.com/servers/github:xxammaxx/OpenCode-Agenten-Oekosystem/security) Heuristic, inferred signals — false positives (legitimately powerful tools, forks, language ports) are expected. Treat each as "review this", not a verdict. See the ecosystem-wide picture on the security hub, or the fleet security of xxammaxx.