canary
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the 'bun' installation script from the well-known service domain 'bun.sh'.
- [REMOTE_CODE_EXECUTION]: Executes a downloaded script using the shell. This process implements a security best practice by verifying the file's SHA256 checksum (
bab8acfb046aac8c72407bdcce903957665d655d7acaa3e11c7c4616beae68dd) before execution to ensure the content has not been tampered with. - [COMMAND_EXECUTION]: Uses the 'eval' command to initialize environment variables from the output of a local project utility (
gstack-slug). - [COMMAND_EXECUTION]: Orchestrates various development tools including 'git', the GitHub CLI ('gh'), and the GitLab CLI ('glab') to automatically detect the project's hosting platform and target deployment branches.
Audit Metadata