
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
opencode-nj-kit
Advanced tools
Drop-in skills, subagents, slash commands, and global AGENTS.md for OpenCode. 20 specialist agents, 37 skills, 10 slash commands.
A drop-in kit for OpenCode that installs:
/plan, /debug, /test, /orchestrate, /deploy, etc.# One-shot, recommended
bunx opencode-nj-kit
# or
npx opencode-nj-kit
That's it. The CLI:
$XDG_CONFIG_HOME/opencode or ~/.config/opencode).bak then overwrite)"instructions": ["./AGENTS.md"] to your opencode.json if missing/agents to see the new specialistsopencode-nj-kit # init (interactive)
opencode-nj-kit init --yes # non-interactive, backup mode
opencode-nj-kit list # show what's bundled
opencode-nj-kit update # re-copy from template
opencode-nj-kit uninstall # remove kit files (.bak kept)
| Flag | Effect |
|---|---|
--yes, -y | Non-interactive, accept defaults |
--force | Overwrite without backup |
--skip-existing | Never touch existing files |
--backup | Backup .bak before overwriting |
--dry-run | Show plan, write nothing |
~/.config/opencode/
├── AGENTS.md ← global instructions
├── agents/ ← 20 *.md agents (mode: all)
├── skills/<name>/SKILL.md ← 37 skills
└── commands/ ← 10 slash commands
opencode.json is patched in-place to ensure instructions: ["./AGENTS.md"]
is set. If you don't have an opencode.json yet, the patch step is skipped
silently.
OpenCode's plugin API (@opencode-ai/plugin) hooks runtime events — it
doesn't ship skills/agents/commands. So the right shape for content packs is a
shadcn-style copy-into-config installer: it gives users full ownership of the
files, lets them customize, and keeps updates explicit.
bunx opencode-nj-kit@latest update
Existing files are backed up to *.bak before overwrite by default, so you
can diff and merge your local changes back in.
bunx opencode-nj-kit uninstall
Removes everything the kit copied. Your .bak files stay so you can restore.
MIT
FAQs
Drop-in skills, subagents, slash commands, and global AGENTS.md for OpenCode. 20 specialist agents, 37 skills, 10 slash commands.
The npm package opencode-nj-kit receives a total of 9 weekly downloads. As such, opencode-nj-kit popularity was classified as not popular.
We found that opencode-nj-kit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.