skills/lensetek/skillforge/agent-forge/Socket

agent-forge

Warn

Audited by Socket on Jul 17, 2026

1 alert found:

Security

SecuritySKILL.md

MEDIUM

SecurityMEDIUM

SKILL.md

SUSPICIOUS. The stated purpose is mostly coherent for a meta-agent architect, but the skill's main mechanism relies on transitive installation of third-party skills and mutable GitHub download paths. Those supply-chain and permission-inheritance risks are disproportionate enough to raise concern even without confirmed malicious behavior.

Confidence: 88%Severity: 76%

Audit Metadata

Analyzed At

Jul 17, 2026, 03:46 AM

Package URL

pkg:socket/skills-sh/lensetek%2FSkillForge%2Fagent-forge%2F@bba5d3a557bda4b727d6545e36706f8adce5fd1e5ed181f5afb83f592f870a7c