The Agent Skills Directory

[PROMPT_INJECTION]: The skill contains explicit instructions meant to bypass the agent's default reasoning and safety boundaries. It commands the agent to "Treat the skill file as executable instructions, not reference" and asserts that the skill's instructions should "win" over any conflicting model safety nudges or behavioral patches.
[DATA_EXFILTRATION]: The skill is designed to access and import browser cookies (which contain sensitive authentication tokens and session data) from the user's local Chromium installation. Additionally, it includes functionality to transmit telemetry data to a remote service via the gstack-telemetry-log binary.
[REMOTE_CODE_EXECUTION]: The skill's setup routine downloads a shell script from https://bun.sh/install and executes it to install the Bun runtime environment if it is not already present on the system.
[DYNAMIC_EXECUTION]: The skill's extensive preamble uses eval and source to execute commands and environment changes generated by local binaries in ~/.claude/skills/gstack/bin/, such as gstack-slug and gstack-repo-mode.
[EXTERNAL_DOWNLOADS]: The skill fetches the Bun installer from https://bun.sh/install and includes references to external documentation at https://garryslist.org/.
[COMMAND_EXECUTION]: The skill executes a large volume of shell commands in its preamble for state management, environment auditing, and telemetry logging, including many calls to project-specific binaries in the author's local directory.

setup-browser-cookies