forge-idiomatic-engineer

Pass

Audited by Gen Agent Trust Hub on May 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a local shell script (scripts/orient.sh) used to automate project inspection. It employs standard utilities like awk, grep, and find to report project status and does not perform any sensitive or destructive operations.
  • [EXTERNAL_DOWNLOADS]: Documentation suggests installing well-known tools such as sqlx-cli and testcontainers. It also describes features that download GeoIP databases during build, which is a documented and standard practice for the framework.
  • [SAFE]: The skill consistently promotes security best practices, including HMAC signature verification for webhooks, environment-based secret management, and the use of isolated database connection pools.
Audit Metadata
Risk Level
SAFE
Analyzed
May 3, 2026, 05:10 PM