diagram
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a significant number of helper binaries located in
~/.claude/skills/gstack/bin/. These utilities manage session tracking, project-specific configuration (e.g.,gstack-config), and state recovery. - [COMMAND_EXECUTION]: Utilizes a browser automation tool (aliased as
$B) to execute JavaScript within a local HTML rendering bundle (diagram-render.html). This is used to convert Mermaid source code into SVG, PNG, and Excalidraw formats. - [DATA_EXFILTRATION]: Includes functionality for telemetry logging and cross-machine artifact syncing. These features are documented as sharing technical metadata or project artifacts with a private repository, and they require user consent through interactive prompts.
- [EXTERNAL_DOWNLOADS]: The preamble logic performs update checks by executing
gstack-update-check. It also references documentation ongarryslist.organd rendering services atexcalidraw.com.
Audit Metadata