AI risk level

None

Recommendation

install

Model

~deepseek/deepseek-v4-flash-latest

Analyzed commit

aac777a

Reviewed

2 weeks ago

This plugin is a passive bar widget that runs a bundled Python scanner against OpenCode's local SQLite database in read-only mode and caches the results under ~/.cache/omarchy. No install-time scripts, network calls, obfuscation, credential access, or destructive operations were found. The behavior matches the documented functionality and poses no notable risk to users.

How this check works

This review combines the deterministic scan (the rule-based results above) with an independent look at the plugin's code by a language model. The model reads a trimmed sample of the repository's files, the manifest, and the README, then gives a plain-language risk level and a recommendation: install (no notable danger), review (look closer first), or avoid (clearly dangerous).

It runs on the same analyzed commit as the deterministic scan and is strictly advisory — it is not a security guarantee and never blocks a plugin by itself. A human moderator still reviews plugins before they are listed.

AI advisory only — automated analysis, not a security guarantee.