Security risk report for @forgecat/forgecat-profile-manager v0.1.4
Source Integrity
Low
Profile is authored by ForgeCat (the registry operator itself) with a public GitHub repository and commit hash provided.
Source is traceable and verifiable; no obfuscation or supply-chain red flags detected.
Agent Intent
Low
Content teaches legitimate ForgeCat CLI operations (search, install, validate, publish) without instructing the agent to ignore instructions, exfiltrate data, or leak system prompts.
Guidance is descriptive and procedural—it documents how to use the ForgeCat tool correctly, not how to circumvent security or manipulate the agent's behavior.
No embedded malicious knowledge, typosquatted dependencies, or instructions to weaken security defaults; all recommendations align with standard ForgeCat workflows.
Details
Evidence
AGENTS.md: 'You don't do the user's work; you set up the agents that will.'
forgecat-install SKILL.md: 'Anything above Low is the user's call, not yours. Quote the finding, name the flag it would take, and let them answer.'
forgecat-publish SKILL.md: 'push assigns the version — don't write one into profile.yml (deprecated and ignored).'
Permissions
Low
No tools or MCP servers are declared in this profile; it is purely instructional documentation.
The skills described (forgecat-authoring, forgecat-install, forgecat-manage, forgecat-publish) invoke the ForgeCat CLI, which is scoped to registry and project management operations—appropriate to their stated purpose.
Details
Evidence
README.md: 'Dependencies: None required to install this profile. Individual skills may require tools or credentials documented in their own SKILL.md files.'
No file_write, file_delete, shell, or web_fetch rules with alwaysApply=true and broad globs.
MCP Risk
Low
No MCP servers are defined in this profile.
Content references external documentation URLs (forgecat.ai) for fetching markdown docs, but this is a documented, expected behavior of the ForgeCat agent and does not constitute hidden or arbitrary execution.
Details
Evidence
Profile declares: '(none)' for MCP servers.
AGENTS.md: 'ForgeCat serves its own documentation as plain markdown for agents. Fetch it — don't recite schema from memory.'
ForgeCat