document-release
Warn
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple local binaries and shell commands for configuration, session tracking, and environment detection, including
gstack-config,gstack-update-check, andgstack-timeline-log. It also leveragesghandglabCLI tools for interaction with git hosting platforms. - [REMOTE_CODE_EXECUTION]: The skill performs dynamic execution of shell code using
evalon the output ofgstack-slugandsourceon the output ofgstack-repo-mode. Additionally, it performs gitfetchandmergeoperations on an artifacts repository using a remote URL defined in local configuration files. - [DATA_EXFILTRATION]: The skill collects telemetry data (skill name, duration, outcome) and transmits it via the
gstack-telemetry-logbinary. It also reads the agent's platform configuration file~/.claude.jsonto identify MCP server settings. - [PROMPT_INJECTION]: The skill ingests untrusted data from various project documentation files (e.g., README.md, ARCHITECTURE.md) and pull request descriptions. While it has access to high-privilege tools like
BashandWrite, it lacks defined boundary markers or sanitization routines to isolate this external content from the agent's instruction context.
Audit Metadata