refresh-kb-links
Warn
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Utilizes dynamic context injection with the
!command syntax to execute a Node.js script during skill initialization. - Evidence:
KB_PATH: !node -e "try{console.log(require('./.forge/config.json').paths.engineering)}catch{console.log('engineering')}"`` in SKILL.md. - [COMMAND_EXECUTION]: The skill is designed to modify the agent's own core instruction files, which determine the agent's behavior and safety constraints.
- Files targeted include:
CLAUDE.md,AGENTS.md,AGENT.md,.github/copilot-instructions.md,.cursorrules,.cursor/rules/*.mdc, andGEMINI.md. - [COMMAND_EXECUTION]: Instructions involve executing external scripts located in the
$FORGE_ROOTdirectory for knowledge base maintenance. - Evidence: References to
node "$FORGE_ROOT/tools/collate.cjs"andnode "$FORGE_ROOT/tools/manage-config.cjs"in the KB Integrity and Rename sections.
Audit Metadata