forge-integrations

SUSPICIOUS: the stated purpose is coherent, but the skill is only a pointer and asks the agent to execute an unverified local runtime and dynamically load more guidance from local composition files. There is no clear credential theft or exfiltration in this adapter, but install/runtime trust and transitive instruction loading make it medium risk until the Fullstack Forge runtime provenance is verified.