forge-realtime
Warn
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a Node.js script via the command line: 'node ../../../.fullstack-forge/runtime/cli/src/composition-entry.js realtime compose --root --json'.
- [REMOTE_CODE_EXECUTION]: The skill requires the execution of a script file found through relative path traversal ('../../../'). This allows the skill to trigger the execution of code residing outside its own package boundary, creating a dependency on external, unverified local files.
- [DATA_EXFILTRATION]: The skill directs the agent to read a 'canonical playbook' and configuration data from '.forge/composition.json' located in parent directories, which allows the agent to access files outside the scope of the individual skill.
Audit Metadata