gstack
Fail
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCREDENTIALS_UNSAFEDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions provide a command to download and execute the official Bun runtime installer from its public distribution URL (bun.sh).
- [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill processes potentially untrusted data from the repository, including pull request descriptions, commit messages, and task lists (SKILL.md).
- Boundary markers: There are no explicit delimiters or specific instructions to ignore embedded commands when processing this data.
- Capability inventory: The skill environment allows for extensive system access, including bash command execution and file modification tools.
- Sanitization: No explicit sanitization or validation of the ingested repository text is described in the workflow.
- [DYNAMIC_EXECUTION]: The preamble logic used across several skill components dynamically executes the output of internal helper scripts through the source command.
- [CREDENTIALS_UNSAFE]: The project configuration includes a hardcoded Supabase anonymous/publishable key intended for transmitting anonymous usage statistics.
- [DATA_EXFILTRATION]: The skill incorporates an opt-in telemetry system that sends anonymized usage data to a remote Supabase backend.
Recommendations
- HIGH: Downloads and executes remote code from: https://bun.sh/install - DO NOT USE without thorough review
Audit Metadata