Skip to main content

insforge-cli

Manages backend infrastructure for InsForge projects, including database operations, serverless functions, and project management.

Install this skill

or
36/100

Security score

The insforge-cli skill was audited on Mar 12, 2026 and we found 10 security issues across 3 threat categories, including 3 high-severity. Review the findings below before installing.

Categories Tested

Security Issues

high line 151

Template literal with variable interpolation in command context

SourceSKILL.md
151**Schedules use 5-field cron only**: `minute hour day month day-of-week`. 6-field (with seconds) is NOT supported. Headers can reference secrets with `${{secrets.KEY_NAME}}`.
medium line 220

Template literal with variable interpolation in command context

SourceSKILL.md
220```bash
high line 259

Template literal with variable interpolation in command context

SourceSKILL.md
259Headers can reference secrets stored in InsForge using the syntax `${{secrets.KEY_NAME}}`.
medium line 261

Template literal with variable interpolation in command context

SourceSKILL.md
261```json
high line 279

Template literal with variable interpolation in command context

SourceSKILL.md
279- Use `${{secrets.KEY_NAME}}` in headers for API keys and tokens
medium line 208

Access to .env file

SourceSKILL.md
208- [ ] Never include `node_modules`, `.git`, `.env`, `.insforge`, or build output in the zip
low line 191

External URL reference

SourceSKILL.md
191insforge deployments deploy ./dist --env '{"VITE_API_URL": "https://my-app.us-east.insforge.app"}'
low line 225

External URL reference

SourceSKILL.md
225--url "https://my-app.us-east.insforge.app/functions/cleanup" \
low line 283

External URL reference

SourceSKILL.md
283- Use the function URL format: `https://your-project.region.insforge.app/functions/{slug}`
low line 358

External URL reference

SourceSKILL.md
358"oss_host": "https://{appkey}.{region}.insforge.app"
Scanned on Mar 12, 2026
View Security Dashboard