forge-database

SUSPICIOUS: the adapter’s stated database purpose is plausible, but its actual footprint is a transitive loader into unseen local playbooks and runtime code, with unverified `forge` maintenance/update commands. No direct credential theft or exfiltration is shown, but install/runtime trust is insufficiently transparent to rate benign.