forge-notifications
Warn
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to execute a local script using the command:
node ../../../.fullstack-forge/runtime/cli/src/composition-entry.js. This involves path traversal to access and run code outside the skill's directory. - [PROMPT_INJECTION]: The instructions command the agent to "Read the canonical playbook now and follow it exactly" from a file at
../../../.fullstack-forge/skills/forge-notifications/SKILL.md. This pattern attempts to redirect the agent's logic to an external file not present in the skill package. - [COMMAND_EXECUTION]: The skill suggests running utility commands like
forge doctorandforge update allif the installation is perceived as damaged, which further encourages the execution of external binaries.
Audit Metadata