
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@vaur94/opencode2-skill-forge
Advanced tools
Independent OpenCode V2 automatic skill-evolution plugin.
The plugin preserves the existing skill-forge behavior and on-disk locations:
.opencode/skills/~/.config/opencode/skills/.opencode/.skill-power/~/.opencode/.skill-power/Reviews are deny-first and isolated. Background reviews may not mutate user-owned,
pinned, protected, or unmanaged skills, and the embedded skill-creator is kept
in memory only. Automatic evolution remains opt-in through evolutionMode.
Configure the plugin with its own options object. Existing skill options can be
moved unchanged from opencode-omni into this plugin.
Build with bun run build:plugin; the published surface is dist/plugin.js plus
the adjacent spr-agent.jsonc and native helper artifacts.
FAQs
Bağımsız MCP skill geliştirme, prompt düzenleme ve yönetim servisi
The npm package @vaur94/opencode2-skill-forge receives a total of 221 weekly downloads. As such, @vaur94/opencode2-skill-forge popularity was classified as not popular.
We found that @vaur94/opencode2-skill-forge demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.