Today gitroot allow plugins to execute process in host. Repository can tell what and when, but admin of the forge can’t:
In forgeConfig admin can choose an executor and diable totally the feature.