opencode 的 Codex 风格执行前安全层：硬拦不可挽回的命令（rm -rf /、fork bomb、curl|sh、mkfs、dd）、展开 bash -c / python -c payload、对破坏性但合法的 git/sql/sudo 操作弹提示，并把模型轻推向 Read/Grep/Glob 而不是 cat/head/tail/find/sed/awk。
Version 0.1.1, 0 weekly downloads, rank 2299. Judged from its declared dependencies.
| @opencode-ai/plugin | * |
|---|---|
| @opencode/plugin | - |
[](https://rafal-one.github.io/opencode-v2-ready/p/opencode-codex-guardrails.html)
It depends on the V1 plugin API and will not load in OpenCode 2 until the author ports it. See how to port.