retro
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: Executes numerous
git logand shell commands to analyze repository history, commit patterns, and code churn to generate retrospective reports. - [EXTERNAL_DOWNLOADS]: Interacts with and executes local binaries from the
gstacktoolset (e.g.,gstack-config,gstack-telemetry-log,gstack-update-check) to manage skill configuration, reporting, and update checks. - [DATA_EXFILTRATION]: Collects and logs telemetry data including skill usage, duration, and session outcomes. While the skill includes a detailed disclosure and consent prompt for telemetry, it logs the repository name locally in
~/.gstack/analytics/skill-usage.jsonlupon activation. - [EXTERNAL_DOWNLOADS]: Offers a workflow to open an external URL (
https://garryslist.org/posts/boil-the-ocean) in the user's browser, which is gated by explicit user confirmation.
Audit Metadata