landing-report
Warn
Audited by Gen Agent Trust Hub on May 16, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONDATA_EXFILTRATIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill's preamble executes extensive shell commands to manage session files, check configurations, and verify the local environment.
- [REMOTE_CODE_EXECUTION]: The skill synchronizes the
~/.gstackdirectory usinggit fetchandgit merge, and executes multiple binaries from~/.claude/skills/gstack/bin/to perform updates, telemetry, and configuration management. - [DYNAMIC_EXECUTION]: Uses
evalandsourcewith process substitution to execute dynamically generated output from internal utility tools likegstack-slugandgstack-repo-mode. - [DATA_EXPOSURE]: Reads
~/.claude.json, which may contain sensitive information about MCP server configurations and transport settings. - [DATA_EXFILTRATION]: Telemetry data, including skill identifiers, execution duration, and outcome status, is transmitted to an external service via the
gstack-telemetry-logutility. - [EXTERNAL_DOWNLOADS]: Performs network operations to check for updates and synchronize project-specific artifacts from remote repositories into the
~/.gstackdirectory. - [METADATA_POISONING]: Suggests modifying the project's
CLAUDE.mdfile to inject routing rules that dictate how the agent should handle future user requests.
Audit Metadata