document-release
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses extensive shell commands in its preamble and workflow steps to manage session state, identify current git branches, and audit documentation files. Commands include
git,gh(GitHub CLI),find,mkdir,touch, andrmwithin the user's home directory (~/.gstack). - [EXTERNAL_DOWNLOADS]: The skill includes instructions to check for updates using
gstack-update-checkand provides an option for the user to open an external URL (https://garryslist.org/posts/boil-the-ocean) in their default browser for educational purposes regarding the 'Completeness Principle'. - [DATA_EXFILTRATION]: The skill implements a telemetry system that logs skill usage, timestamps, and the repository name to a local file (
~/.gstack/analytics/skill-usage.jsonl). It also utilizes agstack-telemetry-logbinary to transmit anonymous usage data, which is explicitly presented to the user as an opt-in/opt-out configuration.
Audit Metadata