design-shotgun
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTIONPERSISTENCE
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on a suite of pre-installed vendor binaries (e.g.,
gstack-config,gstack-update-check,gstack-slug) to manage its internal state, project configurations, and design generation workflows. - [DYNAMIC_EXECUTION]: The preamble utilizes shell
sourceandevalon the output of its internal binaries to dynamically configure the environment and load project-specific identifiers. - [EXTERNAL_DOWNLOADS]: Checks for tool updates and facilitates cross-machine artifact synchronization via external repositories when explicitly enabled by the user.
- [DATA_EXFILTRATION]: Contains opt-in telemetry and artifact sync features. Telemetry sends usage metadata, while synchronization (if configured) uploads design mockups and project plans to a private repository.
- [INDIRECT_PROMPT_INJECTION]: The skill processes several sources of external data that could theoretically influence agent behavior, including project-level markdown files (
DESIGN.md), local site screenshots, and user feedback received via a temporary local HTTP server used for the comparison board. - [PERSISTENCE]: Maintains long-term state including user design preferences, project history, and analytics within the
~/.gstack/directory.
Audit Metadata