forge-connector

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/scaffold_connector.py script executes the forge CLI and npm commands using subprocess.run to initialize projects and install dependencies without using a shell environment.
  • [EXTERNAL_DOWNLOADS]: The skill automates the installation of the official @forge/teamwork-graph SDK from the NPM registry and references official Atlassian developer documentation.
  • [INDIRECT_PROMPT_INJECTION]: The skill scaffolds a data ingestion pipeline that fetches external content for indexing in Rovo Search, creating a potential indirect prompt injection surface.
  • Ingestion points: Data is retrieved from external service APIs via the fetchExternalData function in the generated src/index.ts file.
  • Boundary markers: The generated boilerplate code does not include explicit boundary delimiters or instructions to ignore instructions within the ingested content.
  • Capability inventory: The resulting connector possesses capabilities for network requests (fetch), Teamwork Graph ingestion (setObjects), and persistent storage (kvs).
  • Sanitization: The scaffolding provides a template for field mapping but does not include automated content sanitization or validation routines for the ingested data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 02:06 PM