forge

SUSPICIOUS: the skill’s core repo-fixing workflow is internally coherent and includes meaningful safety limits, but it expands trust to multiple external services/skills and allows broad autonomous action under automode. Risk comes from transitive tool trust, third-party code/context sharing, and untrusted-content processing with write access, not from clearly malicious behavior.