스킬 insforge-cli

📦

insforge-cli

Name: insforge-cli
Author: insforge

콘텐츠 리비전 r1 치명적 📁 파일 시스템 접근🌐 네트워크 접근🔑 환경 변수⚙️ 외부 명령어⚡ 스크립트 포함

Manage InsForge Backends with the CLI

Backend administration spans many commands and safeguards. This skill guides InsForge CLI workflows for projects, databases, deployments, integrations, and diagnostics.

지원: Claude Codex Code(CC)

⚠️ 38 나쁨

Maintain this Skill? Claim it ⚠️ 38 나쁨

이 Skill을 자동으로 설치하지 마세요.

공식 정책에 따라 설치 작업 전에 운영자 검토가 필요합니다.

내 에이전트로 설치

이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.

에이전트 요청

Review the Skillstore skill "insforge-cli" from https://skillstore.io/skills/insforge-insforge-cli.md and its manifest at https://skillstore.io/api/skills/insforge-insforge-cli/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.

에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.

에이전트가 읽기 쉬운 리소스

AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.

Markdown 상세 GET /skills/insforge-insforge-cli.md 서명된 manifest GET /api/skills/insforge-insforge-cli/manifest 서명된 lockfile GET /api/skills/insforge-insforge-cli/lockfile

테스트해 보기

"insforge-cli" 사용 중입니다. Check whether my linked project is ready for a database migration.

예상 결과:

Project status: ready. Authentication and project linkage are valid. Review the pending migration, confirm the target branch, then apply and verify it.

"insforge-cli" 사용 중입니다. Deploy my frontend and confirm its environment settings.

예상 결과:

The local build passed. Required public connection variables are configured, excluded secret files were not uploaded, and the deployment reached a healthy state.

"insforge-cli" 사용 중입니다. Review a destructive branch reset before running it.

예상 결과:

The reset restores the branch database to its original snapshot and removes later data changes. Confirm the branch name and preserve needed data first.

보안 감사

치명적

v3 • 2026. 8. 31. 버전별 보고서 열기

All 400 presented static findings were adjudicated. Confirmed risks include remote script execution, unpinned package execution, broad credential handling, and automatic transmission or retention of project context. No prompt injection or executable obfuscation was found, but nine capped static matches remain unavailable for adjudication. Static review was capped at 400/409 representative findings; omitted static matches are unconfirmed, so automatic publishing stays disabled until manual review.

스캔된 파일

4,123

분석된 줄 수

검토 항목

오탐 무시됨

확인된 보안 우려 사항 (13)

치명적

references/compute-deploy.md:32

Pipe to shell pattern

# Requires `flyctl` on PATH (curl -L https://fly.io/install.sh | sh). NO Docker daemon needed.

The documentation directly recommends downloading a remote installation script and piping it to a shell. A compromised response or upstream host would gain immediate code execution.

치명적

references/compute-deploy.md:243

Pipe to shell pattern

| `flyctl is required for source-mode deploy` | flyctl isn't installed or not on PATH | Install: `cu

The troubleshooting guidance repeats a remote script piped directly into a shell. It provides no version pin, checksum, or inspection step before execution.

높음

references/login.md:86

Credential JSON file

Credentials are saved to `~/.insforge/credentials.json` with restricted file permissions (0600). The

The CLI stores bearer credentials, including full-access user API keys, in a predictable home-directory file. Mode 0600 limits access but does not protect secrets from processes running as the user.

높음

references/compute-deploy.md:52

Environment file access

| `--env-file <path>` | Standard `.env` file (KEY=VALUE per line; `#` comments, blank lines, quoted

The option causes the CLI to read a local environment file that can contain deployment secrets and transmit its values to cloud infrastructure. This is legitimate but security-sensitive credential handling.

높음

references/compute-deploy.md:80

Environment file access

# Env vars from a .env file (preferred for >1 secret)

The example recommends loading multiple secrets from a local environment file for cloud deployment. Accidental file selection or excessive file permissions can expose all included credentials.

높음

references/compute-deploy.md:85

Environment file access

--env-file ./.env.production

This command reads the complete production environment file and sends its values during deployment. Production environment files commonly contain high-impact credentials.

높음

references/local.md:65

Environment file access

`.insforge/checkout/.env` holds the generated secrets. `local start` writes

Generated database and admin secrets are persisted in a predictable local environment file. The provided gitignore reduces commit risk but does not prevent local reads or accidental disclosure.

높음

references/webscraper/apify.md:49

Environment file access

- **Edge function:** `INSFORGE_BASE_URL` and `API_KEY` (the project admin key) are injected automati

The edge-function runtime automatically receives the full project admin key through its environment. Compromise of the function can therefore expose a credential with broad project access.

확인된 13건 모두 보기

높음

references/compute-deploy.md:85

Environment variant files

--env-file ./.env.production

The production environment file is explicitly consumed by the deployment command. This creates real exposure risk if the file contains unrelated secrets or is handled with weak permissions.

높음

SKILL.md:14

Unpinned Automatic NPM Package Execution

The skill requires every command to use npx with automatic approval and no package version. This can download and execute a newly compromised release without review.

The line explicitly mandates npx -y for an unversioned package, which permits automatic retrieval and execution of the current registry release.

높음

references/local.md:60-63

Remote Setup Script Executed by Local Workflow

The local workflow fetches a setup script from a repository and runs the generated stack. The documentation does not specify an immutable revision or integrity verification.

The reference explicitly states that the first start fetches setup.sh and runs the compose file it writes, without documenting a pinned commit or checksum.

중간

SKILL.md:21 SKILL.md:332-364

Automatic Feedback Can Transmit Project Context

The skill directs agents to submit feedback automatically, including commands, errors, and attached project or organization context. Pattern-based redaction cannot guarantee removal of all user data.

The instructions require reporting before continuing and state that linked project or organization context is attached automatically. The same section acknowledges incomplete pattern-based redaction.

중간

SKILL.md:20 SKILL.md:230-236

Durable Project Memory Without Per-Write Consent

The skill directs agents to recall and persist project decisions and problems as a default behavior. Sensitive project context could be stored beyond the current session.

The text explicitly requires memory lookup at task start and immediate durable storage of decisions and problems, without requiring user approval for each write.

기능 검토 항목 (17)

이 스킬에 대해 예상될 수 있는 실제 로컬 기능이므로 검토가 필요하지만, 확인된 악의적 동작으로는 집계되지 않습니다.

높음

references/compute-deploy.md:95

Database connection strings

--env-set DATABASE_URL=postgres://new-host \

The guidance places a database connection string directly in command arguments. Real credentials substituted here can remain in shell history and may be visible in process listings.

높음

references/compute-deploy.md:101

Database connection strings

npx -y @insforge/cli compute update <id> --env '{"NODE_ENV":"production","DATABASE_URL":"..."}'

The database connection string is supplied inline as a command argument. Replacing the placeholder with a live URL can disclose credentials through shell history or process inspection.

높음

references/compute-deploy.md:72

Generic API/secret keys

--env '{"OPENAI_API_KEY": "sk-..."}'

The example passes an API key in an inline command argument. A live value can be retained in shell history and exposed to local process inspection.

높음

references/compute-deploy.md:96

Generic API/secret keys

--env-set API_KEY=sk-... \

The API key is supplied directly through a command-line flag. Using a real value creates avoidable exposure through history, logs, and process metadata.

높음

references/login.md:67

Generic API/secret keys

npx -y @insforge/cli login --user-api-key "$INSFORGE_USER_API_KEY"

The shell expands the full-access user API key into the CLI argument vector. Environment storage avoids a literal history entry, but the expanded value may still be visible to local process inspection.

높음

references/login.md:88

Generic API/secret keys

- User API key — `user_api_key` (the `uak_`, used directly as the bearer)

The full-access user API key is stored as a reusable bearer credential in the local credential file. Theft of that file permits account-level access until revocation.

높음

references/login.md:99

Generic API/secret keys

npx -y @insforge/cli login --user-api-key "$INSFORGE_USER_API_KEY" --json

The login command expands a full-access API key into its argument vector. Other processes running under the same user may be able to observe that value.

높음

references/webscraper/apify.md:49

Generic API/secret keys

- **Edge function:** `INSFORGE_BASE_URL` and `API_KEY` (the project admin key) are injected automati

The function receives the project admin key and uses it as a bearer credential. Any function-level code execution or logging flaw can expose broad project authority.

높음

references/webscraper/apify.md:50

Generic API/secret keys

- **Fly compute:** nothing is auto-injected. Set both yourself at deploy time (`compute deploy --env

The workflow requires placing a project admin key into compute deployment configuration. This grants the deployed workload broad authority and increases impact if the workload is compromised.

높음

SKILL.md:54

Generic API/secret keys

If not authenticated, run `npx -y @insforge/cli login` (opens a browser). For headless / agent / CI

The prescribed headless login expands a full-access API key into the process argument vector. The value can be exposed to local process inspection despite being sourced from an environment variable.

높음

SKILL.md:226

Generic API/secret keys

- `npx -y @insforge/cli ai setup` fetches the linked project's active OpenRouter key and writes `OPE

The command retrieves an active OpenRouter key and writes it to a local environment file. This is real secret extraction and persistence with impact if the file is exposed.

높음

references/login.md:86

Hidden file in home directory

Credentials are saved to `~/.insforge/credentials.json` with restricted file permissions (0600). The

A predictable hidden file stores reusable account credentials, including full-access API keys. Restrictive permissions mitigate cross-user reads but not compromise of the user account.

중간

references/compute-deploy.md:85

Hidden file access

--env-file ./.env.production

The deployment command reads a production environment file likely to contain multiple secrets. This is intended behavior but gives the CLI access to sensitive local data.

중간

references/local.md:65

Hidden file access

`.insforge/checkout/.env` holds the generated secrets. `local start` writes

The local workflow stores generated administrative and database secrets under a hidden project directory. Predictable storage can be read by any process with the user's filesystem privileges.

중간

references/login.md:86

Hidden file access

Credentials are saved to `~/.insforge/credentials.json` with restricted file permissions (0600). The

The CLI writes and later reads reusable bearer credentials from a hidden home-directory file. This creates a real credential-theft target despite mode 0600.

중간

references/payments/razorpay.md:13

Configuration library

If Razorpay is unconfigured, add Key ID and Key Secret. `config set` validates the keys and automati

The setup workflow accepts a Razorpay key secret through command-line configuration. A live secret can be retained in shell history or exposed through process metadata.

중간

references/payments/stripe.md:13

Configuration library

If Stripe is unconfigured, add the environment key. `config set` validates the key and automatically

The setup workflow passes a Stripe secret key directly as a command argument. A substituted live key can leak through shell history, logs, or process inspection.

위험 요인

📁 파일 시스템 접근 (10)

references/branch/merge.md:111 references/branch/merge.md:117 references/compute-deploy.md:85 references/deployments/deploy.md:8 references/local.md:65 references/local.md:66 references/login.md:36 references/login.md:86 references/login.md:36 references/login.md:86

🌐 네트워크 접근 (20)

🔑 환경 변수 (20)

⚙️ 외부 명령어 (50)

⚡ 스크립트 포함 (2)

references/functions-deploy.md:53 references/functions-deploy.md:88

감지된 패턴

Pipe to shell pattern×2

감사자: codex 감사 이력 보기 →

이 보고서 공유 및 인용

버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.

버전별 보고서 열기

보고서 링크 복사

https://skillstore.io/skills/insforge-insforge-cli/audits/3?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 배지

[![Skillstore security assessment](https://skillstore.io/badges/skills/insforge-insforge-cli/security.svg)](https://skillstore.io/skills/insforge-insforge-cli?utm_source=security_passport_badge)

HTML 배지

<a href="https://skillstore.io/skills/insforge-insforge-cli?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/insforge-insforge-cli/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

임베드 카드

<iframe src="https://skillstore.io/embed/skills/insforge-insforge-cli.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

학술 인용 (APA · BibTeX · CFF)

APA 인용

insforge. (2026). insforge-cli security audit report (audit version 3) [Author version unspecified]. Skillstore. https://skillstore.io/skills/insforge-insforge-cli/audits/3

BibTeX 인용

@techreport{insforge-insforge-insforge-cli-2026,
  author = {insforge},
  title = {insforge-cli security audit report (audit version 3)},
  institution = {Skillstore},
  year = {2026},
  number = {3},
  url = {https://skillstore.io/skills/insforge-insforge-cli/audits/3},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "insforge-cli security audit report (audit version 3)"
version: "unspecified"
type: report
authors:
  - name: "insforge"
date-released: "2026-08-31"
url: "https://skillstore.io/skills/insforge-insforge-cli/audits/3"
identifiers:
  - type: other
    value: "skillstore:insforge-insforge-cli:audit:3"
    description: "Skillstore immutable audit report identifier"

Skillstore 점수

이 점수의 이유 증거 신뢰도: 중간

아키텍처

유지보수성

콘텐츠

커뮤니티

사양 준수

만들 수 있는 것

Provision a Backend

Create or link a project, configure services, and return verified connection details for application development.

Operate Cloud Infrastructure

Deploy applications and functions, manage compute services, configure schedules, and inspect production health.

Govern Data and Access

Plan migrations, apply row-level security, test branches, review advisor findings, and manage organization access.

이 프롬프트를 사용해 보세요

Inspect My Project

Check the current InsForge project. Summarize its status, linked identity, and any setup required before I continue.

Create a Database Change

Create a migration for [change]. Include grants, row-level security, integrity checks, and a safe verification plan.

Deploy an Application

Prepare and deploy [application path] to InsForge. Verify environment variables, run a local build, deploy, and report the resulting status.

Plan a Production Change

Assess [production change]. Use an isolated branch when needed, define rollback steps, request approval for destructive actions, and verify logs and advisor results.

모범 사례

Confirm the active project, organization, and branch before any write or deployment.
Keep administrative keys server-only and use protected secret handling instead of inline command arguments.
Use branches, dry runs, backups, and explicit approval before destructive or billing-impacting operations.

피하기

Do not bypass CLI safeguards with undocumented backend requests.
Do not expose admin keys through public environment variables, logs, source control, or frontend bundles.
Do not auto-approve deletion, reset, transfer, role, or billing changes without clear user confirmation.

자주 묻는 질문

What does this skill manage?

It manages InsForge projects, databases, deployments, functions, compute, schedules, integrations, diagnostics, billing, organizations, and related CLI workflows.

Does it write application code using the InsForge SDK?

No. Use the separate InsForge application integration skill for frontend, backend, or edge code that calls the SDK.

Does it require authentication?

Cloud operations usually require authentication. Self-hosted local operations can work without platform login after the project is linked.

Can it run destructive commands?

Yes. Some commands delete data or infrastructure, so the skill requires explicit confirmation and target verification.

How should secrets be handled?

Keep full-access keys server-only, avoid public prefixes, use protected secret stores, and never place live secrets in logs or source control.

Can it manage local InsForge instances?

Yes, when the user explicitly requests Docker-based local infrastructure. The first setup requires network access and downloads runtime components.