Skip to content

Security: ActArtech/flashcodersread

Security

SECURITY.md

Security Policy

Supported versions

Version Supported
0.1.x Yes

What this plugin does

FlashCodersRead runs inside the OpenCode TUI process. It can:

  • Read a local text file path you explicitly provide in the load-file dialog
  • Render text in the bottom bar
  • Store simple UI prefs in memory for the session

It does not need network access of its own.

Reporting a vulnerability

Please do not open a public issue for security reports.

Email or privately message the repository owner listed on the GitHub repo once YOUR_GITHUB_USER is replaced with the real publisher.

Include:

  • OpenCode version
  • OS
  • Plugin version / commit
  • Steps to reproduce
  • Impact (for example: unexpected file reads, keybind theft, prompt injection into chat)

Safe usage notes

  • Only load text files you trust
  • Do not paste secrets into the flash reader if your terminal is shared or recorded
  • Keep OpenCode and this plugin updated

There aren't any published security advisories