office-hours

SUSPICIOUS. The core purpose is legitimate, and most capabilities fit a design-doc/brainstorming workflow, but the skill’s operational footprint is much broader than its stated office-hours role: it runs many local helper executables, reads substantial local project/history data, and can forward structured project context to external services like Aside and Codex. Same-org provenance for gstack reduces the chance of outright malware, but the install/execution trust and external data flows are heavier than necessary for a simple brainstorming skill.

The visible fragment is not overt malware, but it is a high-side-effect assistant workflow. It collects and persists session/project metadata, can write durable personalization records, logs telemetry, launches external promotional URLs, and invokes additional skills. These behaviors are unusual for a general-purpose library and create privacy, user-manipulation, and execution-control concerns. No direct credential theft, destructive action, reverse shell, or network exfiltration is shown. Review the surrounding implementation and enforce explicit consent, strict input escaping, least-privilege filesystem access, and transparent opt-in for telemetry and brain write-back.