forge-all

Warn

Audited by Socket on Aug 6, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: this file is a benign-looking adapter, but its true behavior is deferred to an unseen canonical playbook and its remediation path depends on a vendor-managed CLI/plugin distribution flow. No direct malware indicators appear in the adapter itself, yet the transitive trust and opaque external dependency chain make the skill higher risk than a self-contained local audit skill.

Confidence: 84%Severity: 62%
Audit Metadata
Analyzed At
Aug 6, 2026, 06:48 PM
Package URL
pkg:socket/skills-sh/thethunderbolt%2Ffullstack-forge-skill%2Fforge-all%2F@4e02d7cefedb02e6efbe8f6b5dc7c55ac8f7b76b75110fa53d84cd783319cc18
Security Audit — socket — forge-all