Why this matters Developers link AI provider accounts to OpenCode so the agent can call models on their behalf. If those linked credentials were exposed, an attacker could run inference against the ...