forge-idiomatic-developer
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of API documentation and architectural patterns for the forgelib library. No malicious behavior or suspicious hidden patterns were identified during the analysis.- [EXTERNAL_DOWNLOADS]: The documentation mentions an optional library feature to download and run an embedded Postgres 17 instance (embedded = true in forge.toml). This is a documented utility designed for local development and testing.- [CREDENTIALS_UNSAFE]: The skill describes how the library handles credentials via environment variable interpolation and standard DSN strings (e.g., via postgresUrl()). These are standard database client functionalities and the documentation encourages secure configuration practices.- [PROMPT_INJECTION]: The skill includes guidelines on processing untrusted data and multi-key transitions, focusing on architectural patterns like validation and authorization boundaries to mitigate risks when handling external input.
Audit Metadata