luna/oh-my-opencode
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

feat(skills): add security-research orchestration

Browse Source 
Ship the documented Team Mode security-research capability as an .agents skill and expose /security-research through transition command wrappers.

The exact security-review slug has no reachable history hits; security-research is the documented missing artifact from README and issue #3887.

Refs #3887

Plan: plans/security-research-restore.md
This commit is contained in:
YeonGyu-Kim
2026-05-23 14:03:38 +09:00
parent 1ecf4f6475
commit 2bfad4909e
5 changed files with 246 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.agents/AGENTS.md
+6 -4
View File
@@ -4,11 +4,11 @@
## OVERVIEW
Project-scope skills + slash commands under the new `.agents/` directory name. During the `oh-my-opencode` → `oh-my-openagent` rename transition, this directory is the **target** of the migration from `.opencode/`. It is a strict SUPERSET of `.opencode/` (5 → 9 skills; same 4 commands).
Project-scope skills + slash commands under the new `.agents/` directory name. During the `oh-my-opencode` → `oh-my-openagent` rename transition, this directory is the **target** of the migration from `.opencode/`. It is a strict SUPERSET of `.opencode/` (5 -> 10 skills; 5 commands).
Loaded alongside `.opencode/` by [`src/features/opencode-skill-loader/`](file:///Users/yeongyu/local-workspaces/omo/src/features/opencode-skill-loader/). When both directories declare the same skill or command name, the higher-priority scope wins per the loader's deduplication rules.
## SKILLS (9, superset of `.opencode/`)
## SKILLS (10, superset of `.opencode/`)
| Skill | Also in `.opencode/`? | Purpose |
|-------|------------------------|---------|
@@ -21,16 +21,18 @@ Loaded alongside `.opencode/` by [`src/features/opencode-skill-loader/`](file://
| `omomomo/` | NEW | Skill form of the `/omomomo` easter egg |
| `publish/` | NEW | Skill form of the `/publish` command |
| `remove-deadcode/` | NEW | Skill form of the `/remove-deadcode` command |
| `security-research/` | NEW | Team Mode security research audit: 3 vulnerability hunters + 2 PoC engineers |
The 4 "NEW" skills here are skill-format equivalents of the 4 slash commands that exist in BOTH `.opencode/command/` and `.agents/command/`. They allow the same instructions to be triggered either by an explicit `/command` invocation OR by skill auto-loading on matching prompts.
The 5 "NEW" skills here are skill-format equivalents of slash commands that exist in BOTH `.opencode/command/` and `.agents/command/`. They allow the same instructions to be triggered either by an explicit `/command` invocation OR by skill auto-loading on matching prompts.
## COMMANDS (4 slash commands)
## COMMANDS (5 slash commands)
Identical set to `.opencode/command/`:
- `/get-unpublished-changes`
- `/omomomo`
- `/publish`
- `/remove-deadcode`
- `/security-research`
## OTHER CONTENTS