forge-security-review

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The repository contains a script that automatically downloads and extracts a GitHub Releases ZIP (an executable artifact) and the URL list includes attacker-controlled/undeclared redirect endpoints and analytics callback URLs that are high-risk for delivering binaries or exfiltrating sensitive data.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill’s runtime workflow ingests outsider-authored text from the user-provided Forge codebase at paths like manifest.yml (and then loads packaged rule files), meaning attacker-controlled repo content can influence what the LLM reads during the scan.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill's runtime scripts download and install a remote FSRT binary and then execute it (e.g., downloading from https://github.com/atlassian-labs/FSRT/releases/download/forge-security-review-test/...), so the skill fetches and executes remote code at runtime.