land-and-deploy
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [REMOTE_CODE_EXECUTION]: Downloads and executes the official Bun installation script from bun.sh if the environment is missing during setup, which is a common practice for this runtime.
- [COMMAND_EXECUTION]: Utilizes local utility binaries from the author's gstack framework located in the user's home directory to manage internal state, telemetry, and branch classification.
- [DATA_EXFILTRATION]: Collects telemetry data such as skill duration and outcome to improve performance, stored locally in ~/.gstack/analytics/ before transmission; the skill explicitly requests user consent for this via an interactive prompt.
- [COMMAND_EXECUTION]: Automates Git and GitHub CLI operations to perform safe merges, monitor CI status, and create revert commits in case of deployment failure.
- [COMMAND_EXECUTION]: Employs a browser tool or curl to verify production health by checking status codes, console errors, and page performance after a deployment completes.
Audit Metadata