forge

SUSPICIOUS: The skill’s capabilities mostly match its stated purpose, but its footprint is broad. The main concerns are external transmission of repository content to partner models, use of a bypassPermissions subagent for code changes, and prompt-injection exposure from analyzing untrusted project content before taking actions. No clear malware or overt credential theft behavior is present.