skillforge
SkillForge intelligently analyzes input to recommend, improve, or create skills, enhancing user productivity and skill management.
Install this skill
Security score
The skillforge skill was audited on Jun 13, 2026 and we found 14 security issues across 2 threat categories, including 1 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Piping content to bash shell
| 212 | curl -fsSL https://raw.githubusercontent.com/tripleyak/SkillForge/main/scripts/install_workshop.sh | bash |
Access to hidden dotfiles in home directory
| 236 | Global config lives at `~/.config/skillforge/config.json`. |
Access to hidden dotfiles in home directory
| 242 | Advisor state lives at `~/.local/share/skillforge/advisor_state.json`. |
Access to hidden dotfiles in home directory
| 244 | Queued suggestions live at `~/.local/share/skillforge/advice.jsonl`. |
Access to hidden dotfiles in home directory
| 332 | # Index location: ~/.cache/skillrecommender/skill_index.json |
Access to hidden dotfiles in home directory
| 333 | # Scans: ~/.codex/skills/, ~/.agents/skills/, ~/.claude/skills/, and plugin caches |
Access to hidden dotfiles in home directory
| 372 | python scripts/quick_validate.py ~/.claude/skills/my-skill/ |
Access to hidden dotfiles in home directory
| 375 | python scripts/validate-skill.py ~/.claude/skills/my-skill/ |
Access to hidden dotfiles in home directory
| 378 | python scripts/package_skill.py ~/.claude/skills/my-skill/ ./dist |
Access to hidden dotfiles in home directory
| 451 | ~/.claude/skills/{skill-name}/ |
Access to hidden dotfiles in home directory
| 618 | ls ~/.claude/skills/ |
Access to hidden dotfiles in home directory
| 806 | mkdir -p ~/.claude/skills/{skill-name}/references |
Access to hidden dotfiles in home directory
| 807 | mkdir -p ~/.claude/skills/{skill-name}/assets/templates |
Access to hidden dotfiles in home directory
| 808 | mkdir -p ~/.claude/skills/{skill-name}/scripts # if scripts needed |