Is isaac-levine/forage safe?
Yes. isaac-levine/forage is safe to install. Oathe's behavioral security audit gave the forage skill by isaac-levine a trust score of 97/100 with 2 findings, none critical or high.
https://github.com/isaac-levine/forage
Is isaac-levine/forage safe to install?
Forage is a legitimate MCP server discovery and installation tool that implements appropriate safety measures including required user confirmation for installations. The tool shows no signs of malicious behavior and all security monitoring indicates normal, expected functionality.
What security issues were found in isaac-levine/forage?
Category Scores
Findings (2)
MEDIUM Tool enables installation and execution of arbitrary npm packages -15 ▶
Forage allows users to search for and install arbitrary MCP servers from npm, which involves downloading and executing code. While this is the intended functionality and requires explicit user confirmation, it inherently carries risk if malicious packages exist in the registry.
LOW Potential for social engineering attacks -10 ▶
While the tool itself is well-designed with safety measures, it could theoretically be used in social engineering attacks to trick users into installing malicious MCP servers. The required explicit confirmation mitigates this risk significantly.
Should I install isaac-levine/forage?
Oathe's verdict for isaac-levine/forage is SAFE with a trust score of 97/100. Recommendation: Install.