
Security News
/Company News
Socket Is Sponsoring Composer and Packagist
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.
opencode-plugin-coding
Advanced tools
A shared OpenCode plugin for multi-agent software development workflows: brainstorm, plan, orchestrate, review, debug.
A shared OpenCode plugin for multi-agent software development workflows. Provides skills, guides, and dynamically registered agents that standardize the full cycle: brainstorm, plan, implement, review, debug, and retrospect.
| Skill | Description |
|---|---|
brainstorm | Socratic design interview that refines rough ideas into a validated design document |
plan | Decomposes a design into bite-sized implementation tasks with file paths and acceptance criteria |
orchestrate | Full multi-agent workflow: implement → review → merge → retrospective |
test-driven-development | RED-GREEN-REFACTOR cycle enforcement |
systematic-debugging | 4-phase debugging: reproduce → hypothesize → isolate → fix |
git-worktree | Create and manage isolated git worktrees for parallel development |
playwright | Browser automation via Playwright MCP server |
| Command | Description |
|---|---|
/zooplankton-coding-init | Auto-detect project, generate workflow.json |
/zooplankton-coding-update | Check workflow.json schema updates, show plugin changes |
Guide files define the prompt and behavior for each agent role. The plugin loads them automatically — they are not installed in consumer projects.
Each role has two platform variants (-github.md and -local.md). The plugin selects the correct variant at registration time based on project.platform in workflow.json and injects its content directly into the agent's prompt. No runtime file resolution is needed.
| Guide | GitHub variant | Local variant |
|---|---|---|
| Core coder | core-coder-guide-github.md | core-coder-guide-local.md |
| Core reviewer | core-reviewer-guide-github.md | core-reviewer-guide-local.md |
| Normal reviewer | reviewer-guide-github.md | reviewer-guide-local.md |
| Security reviewer | security-reviewer-guide-github.md | security-reviewer-guide-local.md |
Add the plugin to your project's opencode.json:
{
"$schema": "https://opencode.ai/config.json",
"plugin": [
"opencode-plugin-coding"
]
}
OpenCode will auto-install the plugin from npm via Bun at startup. The plugin registers all skills, commands, and agents automatically — no symlinks, manual copies, or .opencode/agents/*.md files needed.
"plugin": ["opencode-plugin-coding@0.1.5"]
To make the plugin available across all projects without adding it to each project's opencode.json, add the same plugin entry to ~/.config/opencode/opencode.json.
From your project root in OpenCode, run:
/zooplankton-coding-init
This will:
.opencode/workflow.json with project-specific configuration and agent definitions.gitignore for ephemeral plugin filesReview the agents section in .opencode/workflow.json. Each agent is a { name, model } object. The plugin reads these at startup and dynamically registers agents with the appropriate permissions and prompts from the guide files. To change models or add/remove agents, just edit workflow.json and restart OpenCode.
How it works: The plugin uses OpenCode's
confighook to register agents viaconfig.agent, skills viaconfig.skills.paths, and commands viaconfig.command.
After /zooplankton-coding-init, your project will have:
| File | Committed? | Purpose |
|---|---|---|
.opencode/workflow.json | Yes | Project configuration + agent definitions |
.opencode/reviewer-knowledge.json | No (gitignored) | Adaptive reviewer scoring cache |
.opencode/plans/<branch>.md | No (gitignored) | Ephemeral plan files |
.opencode/retrospectives/<branch>.md | No (gitignored) | Ephemeral retrospective files |
workflow.json schema:
{
"project": {
"name": "my-project",
"repo": "Org/my-project",
"defaultBranch": "master",
"platform": "github",
"githubEnterpriseHosts": []
},
"stack": {
"language": "typescript",
"framework": "react",
"packageManager": "yarn"
},
"commands": {
"build": "yarn build",
"lint": "yarn lint",
"test": "yarn test",
"typecheck": "npx tsc --noEmit"
},
"agents": {
"coreCoder": { "name": "core-coder", "model": "github-copilot/claude-opus-4.6" },
"coreReviewers": [
{ "name": "core-reviewer-primary", "model": "github-copilot/claude-sonnet-4.6" },
{ "name": "core-reviewer-secondary", "model": "github-copilot/gpt-5.4" }
],
"reviewers": [
{ "name": "reviewer-glm", "model": "alibaba-coding-plan-cn/glm-5" },
{ "name": "reviewer-minimax", "model": "minimax-cn-coding-plan/MiniMax-M2.7" }
],
"securityReviewers": []
},
"testDrivenDevelopment": { "enabled": false },
"docsToRead": ["AGENTS.md"],
"reviewFocus": ["type safety", "error handling"]
}
MIT
FAQs
A shared OpenCode plugin for multi-agent software development workflows: brainstorm, plan, orchestrate, review, debug.
The npm package opencode-plugin-coding receives a total of 27 weekly downloads. As such, opencode-plugin-coding popularity was classified as not popular.
We found that opencode-plugin-coding demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Company News
Socket has joined the new Composer and Packagist sponsorship program as a launch sponsor, supporting the team that keeps PHP's package ecosystem secure.

Research
/Security News
Benign-looking npm packages split malicious functionality across a dependency chain that deploys a cross-platform RAT targeting Alibaba developers.

Research
/Security News
Two Joyfill npm beta releases contain an import-time implant that uses blockchain transactions to retrieve a remote-access trojan.