skills/kevinzai/cc-commander/retro/Gen Agent Trust Hub

retro

Pass

Audited by Gen Agent Trust Hub on Apr 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: Executes numerous git log and shell commands to analyze repository history, commit patterns, and code churn to generate retrospective reports.
  • [EXTERNAL_DOWNLOADS]: Interacts with and executes local binaries from the gstack toolset (e.g., gstack-config, gstack-telemetry-log, gstack-update-check) to manage skill configuration, reporting, and update checks.
  • [DATA_EXFILTRATION]: Collects and logs telemetry data including skill usage, duration, and session outcomes. While the skill includes a detailed disclosure and consent prompt for telemetry, it logs the repository name locally in ~/.gstack/analytics/skill-usage.jsonl upon activation.
  • [EXTERNAL_DOWNLOADS]: Offers a workflow to open an external URL (https://garryslist.org/posts/boil-the-ocean) in the user's browser, which is gated by explicit user confirmation.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 1, 2026, 05:35 AM
Security Audit — agent-trust-hub — retro