Comment by exyi

You know that prompt injection is a thing, right? Giving opencode access to bash and malicious input is not very far from piping it right into bash.