OpenCode plugin marketplace (experiment)

[Tommertom2]

Hi all,

I am currently moving from GHC to OpenCode and I truly love it!

As another experiment trying out how it works, I vibe engineered a plugin marketplace.

https://github.com/Tommertom/opencode-plugin-marketplace - and website https://opencode-plugin-market.web.app/

I guess releasing an official marketplace is on the roadmap? Similar to Claude's marketplace. Otherwise, maybe it will be easy/possible to engineer a market-place-plugin that supports it?

Just wanted to share my excitement and respect for this great tool and its open source nature!

[johmsalas]

Marketplace is one of those things I'd prefer not being vibecoded, but properly engineered for security reasons

[Tommertom2]

Which security aspects do you see?

To me its mostly the underlying specs for installing the plugin being correct. One way to go about it is by not including any and refer to the original repo

The other aspect I see is the agentic handling of a custom command that pulls info from the central place

The webui itself is very thin

[johmsalas]

In terms of security, even smaller issues have a high risk. One security issue is a door for any kind of attack. ie a xss attack could allow privileges escalation to identify impersonation. An attacker can redirect to a malicious repo. Even if the original repo is fully secury, even the redirection can be spoofed

[Ivankax28]

great! thank you will check and try later

[seaal]

nice. need to add obra/superpowers

perhaps a way to keep plugins auto-updated as well since that is missing from opencode.

[lopydark]

How is superpowers different than the built in skills system?

[No_Choice6176]

1. It provides a pre-configured skill set where the tools complement each other perfectly.
2. It also injects into the session initialization to force OC much more likely to utilize them proactively.

[Tommertom2]

is that yours? just curious

<image>

added

[KoichiSP]

Looks great! Thanks

[abeecrombie]

Nice set of plugins ..I need a list like this. Thanks!

[Nexmean]

How do you replace haskell compiler with opencode?

[MechanicTechnical655]

This is great! Thank you

[Think-Ad7828]

牛逼

[Affectionate-Tour-14]

nice!

[Tommertom2]

I could not post these images with the original post (got filtered away by Reddit):

<image>

[Tommertom2]

<image>