eliteforge-java-service-generator

SUSPICIOUS: The skill’s purpose and actions mostly align with project scaffolding, and it does not request credentials or route data to known exfiltration endpoints. However, install/execution trust is only partially documented: the local generator script, archetype source, and make-based initialization steps are not independently verifiable or pinned, so the workflow carries medium supply-chain risk rather than clear malicious intent.