forge-debugger
Warn
Audited by Socket on Apr 16, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
BENIGN for purpose/capability alignment and install trust: it uses Atlassian's official Forge CLI and official auth flow, and its actions fit Forge debugging. However, it is operationally high-risk because it explicitly empowers the agent to make code changes and perform deploy/install/upgrade actions without asking first, so the skill is best classified as a legitimate but high-impact automation skill rather than malware.
Confidence: 90%Severity: 71%
Audit Metadata