forge

SUSPICIOUS. The skill is broadly aligned with its Roblox creator purpose and its main CLI references appear first-party, but it expands trust to additional skills/tools—especially visual-verdict with unclear provenance—and uses a persistent autonomous workflow with write/exec capabilities. No confirmed credential theft or malicious exfiltration is evident, but the transitive trust and execution scope make it medium risk.