
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
opencode-debug-agent
Advanced tools
OpenCode plugin for runtime debugging - capture and analyze execution data
OpenCode plugin for runtime debugging - capture and analyze execution data via HTTP instrumentation.
skill({ name: "debug" })debug_start, debug_stop, debug_read, debug_clear, debug_statusAdd to your opencode.json:
{
"plugin": ["opencode-debug-agent"]
}
Or for local development, copy to .opencode/plugin/.
Switch to the debug agent (Tab key) and describe your issue. The agent will:
Load the debug skill and help me debug this API timeout issue.
The build agent can then use all debug tools.
debug_start # Start server, get instrumentation snippet
debug_status # Check if server running, get port
debug_read # Read captured logs
debug_read(tail: 10) # Read last 10 entries
debug_clear # Clear log file
debug_stop # Stop server
debug_start launches an HTTP server and returns a ready-to-use fetch() snippetdebug_read returns captured data as structured JSONdebug_stop and remove instrumentation// Snippet returned by debug_start:
fetch("http://localhost:54321/log", {
method: "POST",
headers: {"Content-Type": "application/json"},
body: JSON.stringify({label: "LABEL_HERE", data: {YOUR_DATA}})
})
// Used in code:
fetch("http://localhost:54321/log", {
method: "POST",
headers: {"Content-Type": "application/json"},
body: JSON.stringify({label: "before-api", data: {userId, params}})
})
.opencode/debug.log - NDJSON log file.opencode/debug.port - Persisted port numberbun install
mise run build
mise run test
mise run lint
MIT
FAQs
OpenCode plugin for runtime debugging - capture and analyze execution data
We found that opencode-debug-agent demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.