OpenCode Power Pack v0.5.0

Version 0.5.0 introduces a portable sandbox capability contract and an opt-in native runner for lightweight, fail-closed command containment across Codex, OpenCode, Claude Code, and Pi.

Highlights

• Assigns every one of the 54 bundled skills a least-capability sandbox profile and explicit escalation policy.
• Adds sandbox doctor, sandbox resolve, and sandbox exec commands to the npm CLI.
• Runs one command tree through native macOS Seatbelt or Linux Bubblewrap containment without a persistent container or daemon.
• Provides four ordered profiles: observe, develop, network-read, and publish.
• Denies unrelated host reads, credential-shaped files, unapproved network destinations, unsafe environment variables, and external side effects by default.
• Preserves ordinary Git inspection across nested directories, linked worktrees, and validated submodules without exposing hooks or mutable host Git configuration.
• Ships real containment tests on both ubuntu-latest and macos-latest.
• Documents the exact compatibility boundary and adapter roadmap for Codex, OpenCode, Claude Code, and Pi.

Install

Install or update the CLI:

npm install --global @waybarrios/opencode-power-pack@0.5.0

Check that the operating-system boundary is available:

opencode-power-pack sandbox doctor
opencode-power-pack sandbox doctor --json

Run a read-only code-review command:

opencode-power-pack sandbox exec --skill code-review -- git status --short
opencode-power-pack sandbox exec --skill code-review -- rg TODO .

Allow one declared network destination:

opencode-power-pack sandbox exec \
  --skill code-review \
  --sandbox-profile network-read \
  --allow-domain api.github.com \
  -- curl https://api.github.com/repos/waybarrios/opencode-power-pack

Does it work with Codex and OpenCode?

Yes. Codex and OpenCode can explicitly invoke the same opencode-power-pack sandbox exec command. Claude Code and Pi can invoke it as well when the npm CLI is available.

The current boundary is shell-contained: the selected command and all of its descendants are isolated. Automatic host routing is not implemented yet, so ordinary shell, file, browser, MCP, connector, and computer-use tools are not silently redirected through this runner. Version 0.5.0 does not claim whole-agent isolation.

Platform requirements

• Node.js 20.11.0 or newer.
• macOS with the built-in Seatbelt backend.
• Linux with trusted system installations of bubblewrap, socat, and rg, plus working user and network namespaces.
• WSL2 is expected through the Linux backend but dedicated CI is still pending.
• Windows native and WSL1 intentionally fail closed.

Verification

• 400 automated tests defined, with 399 passing and one native integration entry activated separately by CI.
• Native sandbox containment passing on Ubuntu and macOS.
• Strict Claude Code plugin validation passing.
• OpenCode 1.18.7 smoke validation passing.
• Packed npm artifact verified with 291 files, including all runtime, contract, schema, and compatibility resources.

Documentation

• Sandbox installation and command guide
• Complete compatibility specification
• Full comparison from v0.4.0

opencode-power-pack v0.4.0

Version 0.4.0 is the first public npm release and a major cross-host expansion. The package now delivers 54 curated software-development workflows for Claude Code, Codex, OpenCode, and Pi.

Highlights

• Published the selective installer as the public scoped npm package @waybarrios/opencode-power-pack.
• Added native Claude Code plugin and marketplace manifests.
• Added Codex plugin marketplace metadata while preserving OpenCode and Pi support.
• Expanded the catalog to 54 skills, including 25 Hugging Face workflows and a broader security toolkit.
• Gave code-review and code-reviewer distinct user-facing identities and routing contracts.
• Removed the deprecated wooyun-legacy workflow and all shipped references to it.
• Added official Agent Skills validation, strict Claude plugin validation, OpenCode smoke tests, package-surface tests, and provenance checks.

Install with npm

Run the installer without keeping a global package:

npx @waybarrios/opencode-power-pack list
npx @waybarrios/opencode-power-pack install --profile recommended
npx @waybarrios/opencode-power-pack install code-review security-review
npx @waybarrios/opencode-power-pack install --profile review --project
npx @waybarrios/opencode-power-pack install --profile security --dry-run

Or install the CLI globally:

npm install --global @waybarrios/opencode-power-pack

opencode-power-pack list
opencode-power-pack install --profile recommended

Update or remove the global package:

npm update --global @waybarrios/opencode-power-pack
npm uninstall --global @waybarrios/opencode-power-pack

The npm package is scoped to avoid registry-name ambiguity. It still exposes the shorter opencode-power-pack executable.

Install as a host plugin

Claude Code

/plugin marketplace add waybarrios/opencode-power-pack
/plugin install opencode-power-pack@opencode-power-pack

After installation, explicit skill calls are namespaced:

/opencode-power-pack:code-review
/opencode-power-pack:feature-dev

Codex

codex plugin marketplace add waybarrios/opencode-power-pack --ref v0.4.0
codex plugin add opencode-power-pack@opencode-power-pack

OpenCode

opencode plugin --global "opencode-power-pack@git+https://github.com/waybarrios/opencode-power-pack.git#v0.4.0"

Pi

pi install git:github.com/waybarrios/opencode-power-pack

Use -l for a project-local Pi installation.

Selective profiles

• recommended: balanced software-development workflows
• review: comprehensive and focused review workflows
• feature-dev: explorer, architect, implementation, and reviewer workflow
• frontend: frontend implementation and design critique
• security: security review, threat modeling, static analysis, validation, and reporting
• huggingface: model discovery, inference, training, evaluation, Spaces, and AWS deployment
• authoring: skill and MCP authoring plus paper summarization
• project-memory: durable project-guidance auditing and maintenance

Profiles include required companion skills. They can be combined with individual skill names, --all, --project, --dry-run, and --force.

Code review workflow separation

The overlapping review workflows now have explicit responsibilities:

• code-review: comprehensive, merge-oriented review of a pull request or complete local change set.
• code-reviewer: focused implementation review for fast iteration and feature-development handoffs.

Stable skill IDs remain unchanged. Claude Code namespaces both skills under the plugin, while Codex displays distinct user-facing titles.

Quality and compatibility

Verified for this release:

• 359 automated tests passing
• 54 of 54 skills passing the official Agent Skills validator
• Claude Code plugin and marketplace strict validation passing
• OpenCode minimum-version and latest-version smoke coverage
• npm package surface verified with 286 files
• Node.js 20 or newer
• package provenance, third-party notices, and license coverage verified

Packaging details

• npm package: @waybarrios/opencode-power-pack
• npm access: public
• npm dist-tag: latest
• packaged skills: 54
• packaged files: 286
• unpacked size: approximately 2.3 MB

Migration notes

• wooyun-legacy is no longer shipped.
• The npm registry name is @waybarrios/opencode-power-pack. The unscoped name was never published.
• Plugin IDs and the installed executable remain opencode-power-pack.
• No other stable skill IDs changed.

Related work

• Selective npm installer and curated profiles
• Claude Code support, skill routing cleanup, validation, and documentation
• Full comparison from v0.3.0

What's new

Codex and Pi support

• Added a native Codex plugin manifest and repository marketplace, making all eleven workflows installable through Codex CLI and desktop plugin surfaces.
• Added Codex-specific invocation, verification, update, troubleshooting, and marketplace documentation.
• Added Pi package metadata so pi install git:github.com/waybarrios/opencode-power-pack discovers all eleven bundled skills.
• Added Pi installation, project-local installation, update, verification, and troubleshooting documentation.

Modern OpenCode integration

• Adopted OpenCode 1.18.7+ native skill discovery and same-named slash commands.
• Removed the duplicated legacy commands/ wrappers; each SKILL.md is now the single source of truth for Codex, OpenCode, and Pi.
• Simplified installation and updates with the modern opencode plugin command—no manual command symlinks or cache surgery required.
• Registered code-explorer, code-architect, and code-reviewer as least-privilege, read-only OpenCode subagents without overwriting user-defined agents of the same name.
• Added an OpenCode smoke-test workflow and package-surface regression coverage.

Safer and more complete workflows

• Strengthened feature-dev with explicit specialist assignments, complete before-state capture, phase handoffs, bounded recovery, and a coverage ledger that cannot silently turn incomplete work into a clean result.
• Hardened code-review with frozen PR/local scopes, content-addressed worktree checks, validated child results, bounded recovery, complete coverage ledgers, runtime-input reconciliation, and idempotent comment-posting rules.
• Hardened security-review with explicit scope resolution, path filtering, branch provenance checks, baseline evidence, content-addressed worktree validation, category coverage, secret/runtime-input reconciliation, and distinct complete, empty, and incomplete outcomes.
• Updated code-reviewer, code-explorer, and code-architect to honor authoritative handoffs and treat supplied content as untrusted data.
• Improved frontend-design with separate page/component planning ownership, pre-implementation material requirements, anti-convergence guidance, and objective accessibility and quality thresholds.
• Modernized mcp-builder guidance around immutable protocol evidence, lifecycle and capability negotiation, transports, security boundaries, tools/resources/prompts, MCP error channels, and deterministic protocol tests.
• Corrected project-rule discovery and precedence guidance across Codex, OpenCode, and Claude, including bounded recursive Claude imports and portable packaged-resource resolution.
• Added consistent prompt-injection boundaries and bounded recovery across orchestrators and specialists, including protections for project rules, web evidence, issue text, metadata, and child-agent responses.

Behavioral evaluation and regression testing

• Added an opt-in deterministic behavioral evaluation runner with twelve adversarial cases covering all direct workflow consumers.
• Isolated live evaluation runs from user configuration, plugins, tools, credentials, generated state, and runaway process groups.
• Added strict event parsing, denied-tool detection, response redaction, stable grading, timeouts, schema validation, and fail-closed handling for malformed or incomplete runs.
• Added atomic reports, content-addressed reviewed snapshots, acceptance/replay commands, mutation tests, and documented reviewer workflows.
• Expanded the automated suite to 171 passing tests covering orchestration contracts, prompt safety, plugin registration, package contents, provenance, platform manifests, and behavioral evaluation internals.

Provenance, licensing, and documentation

• Added UPSTREAMS.json with immutable repository commits, source paths, blobs, dates, and adaptation types for every shipped skill.
• Added third-party notices and bundled MIT/Apache-2.0 license texts, with package metadata updated to MIT AND Apache-2.0.
• Reworked the README around Codex, OpenCode, and Pi installation, invocation, architecture, verification, updating, troubleshooting, scope, and contribution workflows.
• Added package metadata and keywords for Codex and Pi, tightened the published file surface, and refreshed the release badge in the project logo.

Compatibility note

• OpenCode users now need OpenCode 1.18.7 or newer.
• Legacy copied or symlinked command files are no longer part of the package. OpenCode creates slash commands directly from the installed skills.

Updating

Codex

codex plugin marketplace upgrade opencode-power-pack
codex plugin add opencode-power-pack@opencode-power-pack

Start a new Codex session after the upgrade.

OpenCode

opencode plugin --global --force "opencode-power-pack@git+https://github.com/waybarrios/opencode-power-pack.git#v0.3.0"

Restart OpenCode after installation. If you previously created command symlinks for an older release, they are no longer required and may override the native skill-derived commands.

Pi

pi update git:github.com/waybarrios/opencode-power-pack

Start a new Pi session after the update.

Validation

• npm test: 171 tests passed
• npm pack --dry-run: verified the 0.3.0 package contents
• GitHub Actions lint-skills: passed on the release commit

Full Changelog: v0.2.0...v0.3.0

What's new

• Adds shared Working discipline guidance to feature-dev, code-architect, and mcp-builder; adds a scope creep criterion to the code-review and code-reviewer checklists.
• agents-md-revise now describes OpenCode's first-match-wins rules loading and steers captures away from shadowed CLAUDE.md files.
• Trims the npm install footprint via a files whitelist in package.json — installing from the git URL now only pulls skills/, commands/, .opencode/, and assets/.
• Expands .gitignore with patterns for context files from other AI agents (Cursor, Windsurf, Copilot, Codex, Gemini, Aider, Continue) and the *.local.md companions of CLAUDE.md / AGENTS.md.

Updating

The steps depend on which install method from the README you used.

Method A — installed from GitHub (git+https://...)

The plugin lives in OpenCode's npm-style cache, and the slash commands are symlinked from a separate local clone.

1. Bump the pinned version (skip if you install unpinned). Edit ~/.config/opencode/opencode.json:

   "opencode-power-pack@git+https://github.com/waybarrios/opencode-power-pack.git#v0.2.0"

2. Pull the local clone (the one the slash commands symlink to):

   cd ~/code/opencode-power-pack
   git pull

   No re-symlinking needed — existing symlinks resolve to the updated files on disk.

3. Clear the plugin cache and restart OpenCode:

   rm -rf ~/.cache/opencode/node_modules/opencode-power-pack
   pkill -f opencode
   opencode

Method B — installed from a local clone (git+file://...)

No cache; the plugin reads directly from your clone.

1. Pull the clone:

   cd ~/code/opencode-power-pack
   git pull

2. Restart OpenCode so the plugin re-evaluates:

   pkill -f opencode
   opencode

Verify

In a new OpenCode session:

List the skills you have available.

You should see the eleven skills under the opencode-power-pack: namespace. To confirm v0.2.0 specifically, ask the model to summarize the feature-dev skill — it should mention the Working discipline section added in this release.

If a skill still looks like the old version, the cache from Method A is stale: re-run step 3 above.

Eleven Claude Code skills, ported to OpenCode

This is the first public release. One config line in opencode.json plus a symlink for slash commands and you have eleven battle-tested skills available in OpenCode.

Skills

Review

• code-review — multi-agent PR review with cross-check pass and concrete reproduction scenarios
• security-review — OWASP-bucketed three-stage filtering with mandatory PoC per finding

Feature dev

• feature-dev — seven-phase guided workflow
• code-explorer — deep codebase analysis sub-task
• code-architect — decisive architecture blueprint sub-task
• code-reviewer — two-pass adversarial review sub-task

Design

• frontend-design — distinctive, production-grade UI generation that avoids generic AI aesthetics

Authoring

• mcp-builder — build high-quality MCP servers (Python or TypeScript)
• skill-creator — author new SKILL.md files

Project memory

• agents-md-improver — audit and update AGENTS.md / CLAUDE.md
• agents-md-revise — capture session learnings into the rules file

Install

{
  "plugin": [
    "opencode-power-pack@git+https://github.com/waybarrios/opencode-power-pack.git#v0.1.0"
  ]
}

Then symlink the slash commands and restart. Full instructions in the README.

Acknowledgments

Almost everything in skills/ is ported or translated from upstream Anthropic projects (claude-code/plugins, skills, claude-code-security-review, claude-plugins-official) and the OpenCode plugin loader pattern is adapted from obra/superpowers. See Acknowledgments for per-skill attribution.