context-save
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local helper scripts (e.g.,
gstack-skill-start,gstack-paths,gstack-slug,gstack-skill-end) located in~/.claude/skills/gstack/bin/to handle session setup, path resolution, and telemetry. These are standard vendor-owned resources used for skill lifecycle management. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input from Git commands (
git status,git diff) to generate summaries. It mitigates potential injection risks by using an allowlist-based sanitizer for file path generation from user-provided titles.
Audit Metadata