forge-idiomatic-engineer
Pass
Audited by Gen Agent Trust Hub on May 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a local shell script (
scripts/orient.sh) used to automate project inspection. It employs standard utilities likeawk,grep, andfindto report project status and does not perform any sensitive or destructive operations. - [EXTERNAL_DOWNLOADS]: Documentation suggests installing well-known tools such as
sqlx-cliandtestcontainers. It also describes features that download GeoIP databases during build, which is a documented and standard practice for the framework. - [SAFE]: The skill consistently promotes security best practices, including HMAC signature verification for webhooks, environment-based secret management, and the use of isolated database connection pools.
Audit Metadata