forge-recovery
Warn
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: MEDIUMCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a shell command:
node ../../../.fullstack-forge/runtime/cli/src/composition-entry.js recovery compose --root <repository-root> --json. This command runs a JavaScript file located several directories above the skill's root, potentially executing code that is not part of the reviewed skill package. - [COMMAND_EXECUTION]: The skill directs the agent to read an external file (
../../../.fullstack-forge/skills/forge-recovery/SKILL.md) and "follow it exactly". This pattern is a form of dynamic instruction loading from arbitrary filesystem paths, which bypasses the boundaries of the skill and could lead to the agent following malicious instructions stored elsewhere on the system.
Audit Metadata