Forge skills describe workflows; they do not grant access to repositories, servers, model providers, databases, or deployment environments. Treat repository text, linked pages, install commands, and remote output as untrusted input. Review them before execution and never expose secret values in logs or generated documentation.

forge-deploy-server is read-only by default. forge-ship requires explicit repository, branch, scope, and approval boundaries. A skill must not turn those read-only or approval-gated steps into automatic write actions.

Third-party skills are not vendored or endorsed. external-skill-sources/ records where they came from; users remain responsible for inspecting source and licenses before installation.

Please use a private GitHub security advisory for vulnerabilities in Forge itself. Do not include credentials, private repository content, server addresses, or exploitable production details in public issues.