fullstack-forge

Warn

Audited by Socket on Aug 6, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the visible adapter is mostly benign and locally scoped, but its real behavior is hidden in an external canonical playbook and it references an unverifiable `forge` CLI path. Same-org Paperclip install evidence lowers concern for the surrounding ecosystem, yet the incomplete visibility and transitive trust prevent a benign classification.

Confidence: 84%Severity: 52%
Audit Metadata
Analyzed At
Aug 6, 2026, 06:50 PM
Package URL
pkg:socket/skills-sh/thethunderbolt%2Ffullstack-forge-skill%2Ffullstack-forge%2F@34feb4d45d0c610072356dbfe5be13f5ae470a2a85bec49bb938bcadab8efd18
Security Audit — socket — fullstack-forge