skills/garrytan/gstack/investigate/Gen Agent Trust Hub

investigate

Pass

Audited by Gen Agent Trust Hub on May 16, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The preamble and various workflow stages execute multiple local scripts and binaries located in ~/.claude/skills/gstack/bin/ to manage configuration, telemetry, and environment state.
  • [COMMAND_EXECUTION]: The skill can automatically modify the project's CLAUDE.md file to add routing rules and perform git commit operations when the 'Continuous Checkpoint' feature is enabled.
  • [DATA_EXFILTRATION]: The skill includes opt-in telemetry and a synchronization feature (gbrain) that allows users to upload project artifacts to a private GitHub repository for cross-machine indexing.
  • [EXTERNAL_DOWNLOADS]: The skill contains logic to check for updates and can synchronize a local artifacts repository using git fetch and git merge if the user has opted into the synchronization service.
Audit Metadata
Risk Level
SAFE
Analyzed
May 16, 2026, 12:51 PM
Security Audit — agent-trust-hub — investigate