forge-reliability

SUSPICIOUS: the adapter itself is narrow and local-only, but it defers all meaningful behavior to unseen Fullstack Forge files and a local runtime whose public provenance was not clearly verified. No direct exfiltration, credential harvesting, or remote download-execute chain is visible here, yet the hidden transitive behavior and unverifiable publisher relationship raise medium security concern.