Security risk report for @forgecat/andrej-karpathy-skills v0.0.9
Source Integrity
SRC-010Medium
Profile is sourced from a public GitHub repository (multica-ai/andrej-karpathy-skills) with a pinned commit hash (2c606141936f1eeef17fa3043a72095b4765b9c2), enabling reproducibility and verification.
ForgeCat has transparently documented the upstream source, license declaration (MIT), and added reference materials separately; no copyright holder or year is inferred by ForgeCat, and the upstream absence of a copyright notice is explicitly disclosed.
Content consists of legitimate behavioral guidelines for LLM coding practices (simplicity, clarity, surgical changes, goal-driven execution) derived from Andrej Karpathy's public observations on LLM pitfalls.
No instructions attempt to manipulate the AI into reading credentials, exfiltrating data, hiding instructions, installing remote payloads, leaking system prompts, or poisoning future outputs with malicious guidance.
Examples in EXAMPLES.md describe common LLM mistakes (overcomplication, wrong assumptions) for educational purposes; they do not instruct the agent to perform those mistakes.
Details
Evidence
Four principles focus on sound engineering: 'Think Before Coding', 'Simplicity First', 'Surgical Changes', 'Goal-Driven Execution'.
EXAMPLES.md shows ❌ (wrong) vs ✅ (correct) patterns; the ❌ sections describe anti-patterns, not instructions to follow them.
No references to reading ~/.ssh, ~/.aws, .env, exfiltration, remote execution, or system prompt leakage.
Permissions
Low
No tools, hooks, or MCP servers are declared in this profile; it is purely instructional markdown content.
The profile does not request file system access, shell execution, network calls, or any elevated permissions beyond reading the guidelines themselves.
Details
Evidence
No 'tools' or 'mcp_servers' sections in the profile metadata.
Content is static markdown guidance; no alwaysApply rules with globs or high-risk tool categories are present.
MCP Risk
Low
No MCP servers are defined in this profile.
The profile contains only markdown documentation and behavioral guidelines; no binary execution, network access, or filesystem operations are configured.
Details
Evidence
No 'mcp_servers' field in the profile.
All content is static text and markdown; no tool definitions or external service integrations are present.
ForgeCat