fix(opencode): gate host access and preserve evidence

Signed-off-by: Narendran Raghavan <nraghavan@nvidia.com>

Author: rng1995

.github/workflows/ci.yml

@@ -33,6 +33,7 @@ concurrency:
 env:
   UV_VERSION: "0.10.x"
   PYTHON_VERSION: "3.12"
+  NODE_VERSION: "22.20.0"
   UV_CACHE_DIR: .uv-cache
   UV_LINK_MODE: copy
 
@@ -90,6 +91,18 @@ jobs:
       - run: uv run skillspector --version
       - run: uv run make test-ci
 
+  test-opencode:
+    name: OpenCode TypeScript Tests
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Set up Node.js
+        # Pinned to a full commit SHA (third-party action); comment tracks the tag.
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
+        with:
+          node-version: ${{ env.NODE_VERSION }}
+      - run: node --test tests/opencode/skillspector_scan_lib.test.ts
+
   docker-smoke:
     needs: changes
     if: needs.changes.outputs.docker == 'true'

.opencode/tools/skillspector_scan.ts

@@ -1,18 +1,10 @@
 import { tool } from "@opencode-ai/plugin"
 import { execFile } from "node:child_process"
 import fs from "node:fs"
-import path from "node:path"
 import { promisify } from "node:util"
-import {
-  TIMEOUT_MS,
-  buildCliArgs,
-  formatExecError,
-  formatSuccess,
-  isUrlOrAbsolute,
-  resolveBinary,
-} from "./skillspector_scan_lib.ts"
+import { executeScan, type RunFile } from "./skillspector_scan_lib.ts"
 
-const runFile = promisify(execFile)
+const runFile = promisify(execFile) as unknown as RunFile
 
 export default tool({
   description: "Scan an AI agent skill for security risks with SkillSpector. Static analysis only by default; opt into LLM analysis explicitly.",
@@ -23,27 +15,10 @@ export default tool({
     output: tool.schema.string().optional().describe("Write the report to this file instead of returning it (resolved against the session directory if relative)"),
   },
   async execute(args, context) {
-    const baseDir = context.directory ?? context.worktree ?? process.cwd()
-    const target = isUrlOrAbsolute(args.target) ? args.target : path.resolve(baseDir, args.target)
-    const output = args.output
-      ? (isUrlOrAbsolute(args.output) ? args.output : path.resolve(baseDir, args.output))
-      : undefined
-    const bin = resolveBinary(context.worktree ?? baseDir, {
+    return executeScan(args, context, {
+      runFile,
       existsSync: fs.existsSync,
+      lstatSync: fs.lstatSync,
     })
-    const cliArgs = buildCliArgs({ target, format: args.format, noLlm: args.noLlm, output })
-
-    let result: { stdout: string; stderr: string }
-    try {
-      result = (await runFile(bin, cliArgs, {
-        timeout: TIMEOUT_MS,
-        maxBuffer: 32 * 1024 * 1024,
-        cwd: baseDir,
-      })) as { stdout: string; stderr: string }
-    } catch (err: unknown) {
-      return formatExecError(bin, err)
-    }
-
-    return formatSuccess(output, result.stdout, result.stderr)
   },
 })