forge-all
Warn
Audited by Socket on Aug 6, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: this file is a benign-looking adapter, but its true behavior is deferred to an unseen canonical playbook and its remediation path depends on a vendor-managed CLI/plugin distribution flow. No direct malware indicators appear in the adapter itself, yet the transitive trust and opaque external dependency chain make the skill higher risk than a self-contained local audit skill.
Confidence: 84%Severity: 62%
Audit Metadata