forge-docs

Warn

Audited by Socket on Aug 6, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the visible adapter is narrow and locally scoped, but it intentionally defers all substantive behavior to unseen local skill files and dynamically selected guidance. No direct exfiltration or credential access is shown, yet the hidden transitive instruction-loading and updater dependency make the skill only partially auditable from this fragment.

Confidence: 84%Severity: 58%
Audit Metadata
Analyzed At
Aug 6, 2026, 06:48 PM
Package URL
pkg:socket/skills-sh/thethunderbolt%2Ffullstack-forge-skill%2Fforge-docs%2F@bf45cebc65a37e4f051d78dddbee5944b58eb5bf1630d8f9f0a8322edbaa0342
Security Audit — socket — forge-docs