MCP Observatory
6m ago Tracked 26,568 Last 6m ago 24h 1,906
github JavaScript analyzed 08b167f

hretheum/skillforge

github

Composable skills engine for agent pipelines — MCP server + CLI

maintainer
hretheum
license
NOASSERTION
first seen
2026-06-12
last seen
2026-06-14
releases · 30d
0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 0 tools
transport stdio counts 0 tools · 0 res · 0 prompts permission surface via code analysis

No tools enumerated yet for this server.

skills & danger signals github-tarball
prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit 08b167f · analyzer v28 · 2d ago

skills & prompt files 200

code evidence vskills-v0.2.1 · github-tarball
evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 268

filesystem 36

  • fs hretheum-skillforge-08b167f/bin/skillforge.js :2 import { readFileSync } from 'node:fs';
  • fs hretheum-skillforge-08b167f/packages/ecc-bundle/skills/ck/commands/forget.mjs :14 import { rmSync } from 'fs';
  • fs hretheum-skillforge-08b167f/packages/ecc-bundle/skills/ck/commands/init.mjs :11 import { readFileSync, existsSync } from 'fs';
  • fs hretheum-skillforge-08b167f/packages/ecc-bundle/skills/ck/commands/migrate.mjs :14 import { readFileSync, existsSync, renameSync } from 'fs';
  • fs hretheum-skillforge-08b167f/packages/ecc-bundle/skills/ck/commands/resume.mjs :11 import { existsSync } from 'fs';
  • fs hretheum-skillforge-08b167f/packages/ecc-bundle/skills/ck/commands/save.mjs :19 import { readFileSync, mkdirSync, writeFileSync } from 'fs';
  • fs hretheum-skillforge-08b167f/packages/ecc-bundle/skills/ck/commands/shared.mjs :8 import { readFileSync, writeFileSync, existsSync, mkdirSync } from 'fs';
  • fs hretheum-skillforge-08b167f/packages/ecc-bundle/skills/ck/hooks/session-start.mjs :17 import { readFileSync, writeFileSync, existsSync } from 'fs';
  • fs hretheum-skillforge-08b167f/src/adapters/input/dtcg-tokens.js :30 import { readFileSync } from "node:fs";
  • fs hretheum-skillforge-08b167f/src/adapters/input/flat-tokens.js :38 import { readFileSync } from "node:fs";
  • fs hretheum-skillforge-08b167f/src/adapters/run-edges.js :27 import { readFileSync } from "node:fs";
  • fs hretheum-skillforge-08b167f/src/cli/config-command.js :11 import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
  • fs hretheum-skillforge-08b167f/src/cli/emit-command.js :13 import { readFileSync, writeFileSync, mkdirSync, existsSync } from 'node:fs';
  • fs hretheum-skillforge-08b167f/src/cli/init-command.js :11 import { mkdirSync, readFileSync, writeFileSync } from 'node:fs';
  • fs hretheum-skillforge-08b167f/src/cli/skills-command.js :25 } from 'node:fs';
  • fs hretheum-skillforge-08b167f/src/governance/memory-posture.js :120 await fs.writeFile(checkpointPath, payload, 'utf8');
  • fs hretheum-skillforge-08b167f/src/learning/skill-promoter.js :22 import { promises as nodeFs } from "node:fs";
  • fs hretheum-skillforge-08b167f/src/loader/config-loader.js :24 import { readFileSync, statSync } from 'node:fs';
  • fs hretheum-skillforge-08b167f/src/mcp/server.js :15 import { readFileSync, writeFileSync, existsSync, mkdirSync, lstatSync } from 'node:fs';
  • fs hretheum-skillforge-08b167f/src/mcp/update-checker.js :10 import { readFileSync, writeFileSync } from 'node:fs';
  • fs hretheum-skillforge-08b167f/src/skills/benchmark-methodology/compose.js :5 import { readFileSync } from 'node:fs';
  • fs hretheum-skillforge-08b167f/src/skills/brand-discovery/compose.js :13 import { readFileSync } from 'node:fs';
  • fs hretheum-skillforge-08b167f/src/skills/competitive-platform-analysis/compose.js :14 import { readFileSync } from 'node:fs';
  • fs hretheum-skillforge-08b167f/src/skills/competitive-report-structure/compose.js :5 import { readFileSync } from 'node:fs';
  • fs hretheum-skillforge-08b167f/src/store/discovery.js :8 import { readdirSync, statSync } from 'node:fs';
  • fs hretheum-skillforge-08b167f/src/store/manifest.js :8 import { readFileSync, writeFileSync } from 'node:fs';
  • fs hretheum-skillforge-08b167f/tools/adapter-gate-coverage.js :31 import { existsSync } from "node:fs";
  • fs hretheum-skillforge-08b167f/tools/artifact-cve-lint.js :23 import { readdirSync, readFileSync, statSync } from "node:fs";
  • fs hretheum-skillforge-08b167f/tools/cleanroom-guards.js :33 import { readdirSync, readFileSync, statSync, existsSync } from "node:fs";
  • fs hretheum-skillforge-08b167f/tools/determinism-gate.js :50 import { readFileSync, mkdtempSync, mkdirSync, writeFileSync, cpSync, rmSync } from "node:fs";
  • fs hretheum-skillforge-08b167f/tools/gates.js :23 import { existsSync } from "node:fs";
  • fs hretheum-skillforge-08b167f/tools/registry-lint.js :44 import { readdirSync, readFileSync, statSync } from "node:fs";
  • fs hretheum-skillforge-08b167f/tools/residency-check.js :28 import { existsSync, readFileSync } from "node:fs";
  • fs hretheum-skillforge-08b167f/tools/secret-scan.js :21 import { readdirSync, readFileSync, statSync } from "node:fs";
  • fs hretheum-skillforge-08b167f/tools/skills-ref.js :35 import { readdirSync, readFileSync, statSync } from "node:fs";
  • fs hretheum-skillforge-08b167f/tools/telemetry-config-lint.js :17 import { readdirSync, readFileSync, statSync } from 'node:fs';

shell / exec 8

  • shell hretheum-skillforge-08b167f/packages/ecc-bundle/skills/ck/commands/shared.mjs :11 import { spawnSync } from 'child_process';
  • shell hretheum-skillforge-08b167f/packages/ecc-bundle/skills/ck/hooks/session-start.mjs :20 import { spawnSync } from 'child_process';
  • shell hretheum-skillforge-08b167f/src/cli/skills-command.js :13 import { execFileSync } from 'node:child_process';
  • shell hretheum-skillforge-08b167f/src/governance/mcp-risk-guard.js :118 if (cmdLower.includes("eval(") || cmdLower.includes("function(") || cmdLower.includes("exec(")) {
  • shell hretheum-skillforge-08b167f/src/mcp/update-checker.js :12 import { execFileSync } from 'node:child_process';
  • shell hretheum-skillforge-08b167f/tools/dependency-audit.js :22 import { spawnSync } from "node:child_process";
  • shell hretheum-skillforge-08b167f/tools/gates.js :24 import { spawnSync } from "node:child_process";
  • shell hretheum-skillforge-08b167f/tools/guardrail-bridge.js :35 import { spawnSync } from "node:child_process";

network 1

  • net hretheum-skillforge-08b167f/tools/guardrail-bridge.js :180 await fetch(`${endpoint.replace(/\/$/, "")}/v1/metrics`, {

install hooks 1

  • prepublishOnly hretheum-skillforge-08b167f/package.json :26 node tools/gates.js

declared dependencies 1

  • @modelcontextprotocol/sdk@^1.29.0