XferOps Forge

Manage projects and tasks with the Forge project management API via MCP. Use when creating, updating, or searching tasks/tickets, managing projects and colum...

Proceed cautiously. The skill's behavior is mostly coherent with its description, but it requires you to install an npm package via npx and to add FORGE_URL/FORGE_TOKEN to your MCP client config even though the registry metadata declares no credentials — this is a mismatch you should resolve before installing. Before using: 1) Verify the @xferops/forge-mcp package and the domain (forge.xferops.dev) are legitimate and come from an expected maintainer (check npm page, repository, and package signing if available). 2) Create a scoped, least-privilege API token in Forge (rotate/delete it if you later remove the skill). 3) Consider running the npx install in an isolated environment (or inspect the package contents) rather than running it on a production host. 4) Update or ask the publisher to update registry metadata to declare required env vars (FORGE_URL/FORGE_TOKEN) so the credential requirement is explicit. If you cannot verify the package/source, do not install or provide a long-lived token.

Type: OpenClaw Skill Name: xferops-forge Version: 1.0.5 The skill bundle provides a standard integration for 'Forge,' a project management platform. It contains instructions for an AI agent to manage tasks, projects, and team members using a set of MCP tools. The setup process involves installing the '@xferops/forge-mcp' package via npx and configuring an API token for 'https://forge.xferops.dev', which is consistent with the stated purpose of the skill and lacks any indicators of malicious intent or data exfiltration.