[renovate]

This PR contains the following updates:

Package	Update	Change
atlassian/forge-skills	digest	1b89cbd → ccef03b

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[toolhive-release-app]

🛡️ Skill Security Scan Results

✅ forge-app-builder

• Status: Passed
• Findings: 4
• Allowed (not blocking): 3
  • TOOL_ABUSE_UNDECLARED_NETWORK (Allowed: The skill's bundled list_templates.py fetches Atlassian's Forge template catalog; the skill does not declare a dedicated network-access tool but the network call is for a documented, trusted destination.)
  • COMMAND_INJECTION_SHELL_TRUE (Allowed: Accepted risk: scripts/deploy_forge_app.py:68 runs forge CLI commands with shell=True, interpolating the operator's own --site, --env, and --developer-space-id arguments. Input comes from the person running the script locally, not from untrusted content.)
  • DATA_EXFIL_NETWORK_REQUESTS (Allowed: scripts/list_templates.py uses urllib.request.urlopen() to fetch the official Forge app template index from Atlassian — documented workflow step for scaffolding new apps.)

✅ forge-app-review

• Status: Passed
• Findings: 1
• Allowed (not blocking): 1
  • MANIFEST_MISSING_LICENSE (Allowed: Most upstream skill repositories declare their license at the repository root rather than in each SKILL.md's frontmatter. Packaging a skill already requires a maintainer to verify that the upstream license permits redistribution (see AGENTS.md), so the frontmatter field adds nothing to that check.)

✅ forge-debugger

• Status: Passed
• Findings: 3
• Allowed (not blocking): 2
  • LLM_AUTONOMY_ABUSE (Allowed: Accepted risk: SKILL.md's "EXECUTION MANDATE" section tells the agent it may run all diagnostic and fix commands without asking and must not ask "shall I proceed?" before a fix. Fixes can include npm installs, forge deploy, and forge install/upgrade against the user's own Forge environments; only interactive commands (forge login, forge tunnel) are handed back to the user. Accepted because this is first-party Atlassian guidance for fixing the user's own app, and a skill's text cannot grant permissions: each command still goes through the agent's tool approval. Note this entry matches any LLM_AUTONOMY_ABUSE finding for this skill.)
  • MANIFEST_MISSING_LICENSE (Allowed: Most upstream skill repositories declare their license at the repository root rather than in each SKILL.md's frontmatter. Packaging a skill already requires a maintainer to verify that the upstream license permits redistribution (see AGENTS.md), so the frontmatter field adds nothing to that check.)

---

Summary: Completed 3 of 3 skill scan(s), all passed security checks. ✅

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[danbarr]

This was the one Renovate PR from the 10/25 batch that failed CI. scan (skills/forge-app-builder) was blocked by a new HIGH LLM_COMMAND_INJECTION finding at scripts/deploy_forge_app.py:68.

That is the subprocess.run(cmd, shell=True) call in run_command. The script is unchanged between the old ref (1b89cbd) and the new one (ccef03b), and the same call is already allowlisted under COMMAND_INJECTION_SHELL_TRUE (operator-supplied args, run locally). The LLM analyzer just reported it under a different rule ID this time, so I added a matching LLM_COMMAND_INJECTION allowlist entry that reuses that reasoning.

I also rebased the branch onto current main to pick up skill-scanner 2.3.2. CI is green now. Since I pushed to the branch, it needs an approval from someone else.

🤖 Generated with Claude Code