Annoying and alarming things about OpenCode
OpenCode, a popular open-source AI coding agent with 161k GitHub stars, has significant security and usability flaws according to a critical analysis of its source code. The tool fundamentally operates as a web-stack application that pipes LLM outputs directly to bash commands, creating serious security vulnerabilities and poor design decisions throughout its architecture. The author concludes that users should stop using OpenCode due to both "annoying" functionality issues (such as inefficient prompt caching that causes excessive wait times) and more "alarming" security problems.
Read Full Article →