fullstack-forge
Warn
Audited by Socket on Aug 6, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the visible adapter is mostly benign and locally scoped, but its real behavior is hidden in an external canonical playbook and it references an unverifiable `forge` CLI path. Same-org Paperclip install evidence lowers concern for the surrounding ecosystem, yet the incomplete visibility and transitive trust prevent a benign classification.
Confidence: 84%Severity: 52%
Audit Metadata