The Agent Skills Directory

[REMOTE_CODE_EXECUTION]: The skill fetches and executes the installation script for Bun from its official domain (bun.sh). Bun is a widely recognized developer tool, and the installation pattern is standard for this runtime.
[COMMAND_EXECUTION]: The skill makes extensive use of shell commands via the Bash tool to audit the environment, manage local session states, build internal tools, generate test suites, and perform atomic git commits for design fixes.
[DATA_EXFILTRATION]: Implements a telemetry system that logs skill usage, session IDs, and repository names to a local analytics directory (~/.gstack/analytics/). Data is transmitted externally via a dedicated logging utility. The system includes an explicit opt-in mechanism for users to choose between community, anonymous, or disabled telemetry modes.
[PROMPT_INJECTION]: The skill processes untrusted data from external websites during design audits, creating a surface for indirect prompt injection.
Ingestion points: Content, fonts, and interaction data from external URLs are retrieved using the browser tool ($B).
Boundary markers: No specific delimiters are used to wrap or sanitize content retrieved from external sites.
Capability inventory: The skill has broad permissions including Bash, Read, Write, and Edit tools, allowing it to modify source code based on audited content.
Sanitization: There is no evidence of filtering or sanitizing the data ingested from target websites before it is analyzed by the agent context.
[EXTERNAL_DOWNLOADS]: The skill performs web searches to research testing best practices and navigates to external URLs to perform visual QA audits. It also opens documentation links (e.g., to garryslist.org) in the user's browser.

design-review