[FEATURE]:建议创造一个插件市场，对插件需要做到安全审查

[aokihu]

Feature hasn't been suggested before.

• I have verified this feature I'm about to request hasn't been suggested before.

Describe the enhancement you want to request

opencode的插件机制太开放，缺少必要的安全审查，如果有危害代码在插件中会给开发者带来潜在的安全风险。建议建立一个插件市场，对插件进行安全检查后提供统一的路径安装插件

[github-actions]

This issue might be a duplicate of existing issues. Please check:

• [FEATURE]: Skill Registry + Installer for Awesome-Claude-Skills (Make OpenCode the One Tool) #8386: [FEATURE]: Skill Registry + Installer for Awesome-Claude-Skills - proposes a comprehensive registry and installation system for skills with security considerations including permission confirmations, provenance tracking, and license warnings
• Security Issue - Autoloading Repository Plugins #7163: Security Issue - Autoloading Repository Plugins - addresses the critical security concern of automatically loading untrusted plugins from repositories without user confirmation
• [FEATURE]: Plugin install - add to trusted dependencies #8208: [FEATURE]: Plugin install - add to trusted dependencies - proposes marking plugins as trusted (similar concept to a curated plugin marketplace)
• [FEATURE]: Add askPermission to plugin ToolContext #6043: [FEATURE]: Add askPermission to plugin ToolContext - allows plugins to request user confirmation before sensitive operations
• Streamlined Distribution for Agent Definitions #3471: Streamlined Distribution for Agent Definitions - discusses plugin and package distribution mechanisms

The core request appears to be asking for a plugin marketplace with security review. Issues #8386 and #7163 directly address similar concerns about security, verification, and trusted distribution of extensible components.

Feel free to ignore if none of these address your specific case.