Security risk report for @forgecat/anthropics_skills_internal-comms v0.0.5
Source Integrity
Low
Profile claims Anthropic as author with a public GitHub repository (nota-america/forgecat-agent-profiles) and Apache-2.0 license.
No suspicious external URLs, typosquatted dependencies, or hidden remote payloads in the installation or skill definitions.
Agent Intent
Low
Content describes legitimate internal communication templates (3P updates, newsletters, FAQs) with standard formatting and workflow guidance; no instructions to ignore system prompts, read credentials, or exfiltrate data.
Skill instructions reference accessing Slack, Google Drive, Email, and Calendar as *optional* information sources to improve drafts—this is normal context-gathering for a writing assistant, not malicious guidance poisoning.
No embedded backdoored code templates, typosquatted packages, security-weakening directives, or persistent biased rules designed to steer future outputs toward attacker goals.
Details
Evidence
SKILL.md: 'To write any internal communication: 1. Identify the communication type... 2. Load the appropriate guideline file... 3. Follow the specific instructions'
3p-updates.md: 'Try to gather as much context as you can... If you don't have access, you can ask the user for things they want to cover.'
company-newsletter.md: 'If you have access to the following tools, please try to use them. If not, you can also let the user know directly...'
Permissions
Low
No tool definitions or MCP servers declared in the profile; the skill is purely instructional guidance for writing tasks.
References to Slack, Google Drive, Email, and Calendar are *suggested* information sources for the user to provide or the agent to request—not permissions granted to the profile itself.
Details
Evidence
README.md: 'Dependencies: None required to install this profile.'
SKILL.md: 'Tools Available: Whenever possible, try to pull from available sources...' (describes optional context-gathering, not tool grants)
MCP Risk
Low
No MCP servers defined in the profile.
No hidden instructions in tool descriptions, arbitrary binary execution, or unrestricted network/filesystem access.
ForgeCat