design-shotgun

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTIONPERSISTENCE
Full Analysis
  • [COMMAND_EXECUTION]: The skill relies on a suite of pre-installed vendor binaries (e.g., gstack-config, gstack-update-check, gstack-slug) to manage its internal state, project configurations, and design generation workflows.
  • [DYNAMIC_EXECUTION]: The preamble utilizes shell source and eval on the output of its internal binaries to dynamically configure the environment and load project-specific identifiers.
  • [EXTERNAL_DOWNLOADS]: Checks for tool updates and facilitates cross-machine artifact synchronization via external repositories when explicitly enabled by the user.
  • [DATA_EXFILTRATION]: Contains opt-in telemetry and artifact sync features. Telemetry sends usage metadata, while synchronization (if configured) uploads design mockups and project plans to a private repository.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes several sources of external data that could theoretically influence agent behavior, including project-level markdown files (DESIGN.md), local site screenshots, and user feedback received via a temporary local HTTP server used for the comparison board.
  • [PERSISTENCE]: Maintains long-term state including user design preferences, project history, and analytics within the ~/.gstack/ directory.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 07:43 PM