rstack-mode
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONMETADATA_POISONING
Full Analysis
- [COMMAND_EXECUTION]: The skill includes several scripts (
scripts/bootstrap.ts,scripts/orch/orch.ts,scripts/watch-pr/watch-pr) that execute shell commands such asgit,gh(GitHub CLI), andbun install. These are used for standard repository management, pull request monitoring, and dependency bootstrapping within the skill's own directory. The logic includes safeguards like--frozen-lockfileand specific path resolution. - [METADATA_POISONING]: The
SKILL.mdfile contains instructions aimed at the AI agent to prioritize its own rules ('Start every multi-step task with a todolist whose first item is to read the Principles section...'). While these are structural instructions for agent behavior, they are typical for 'mode' or 'persona' skills and do not attempt to bypass platform-level safety filters.
Audit Metadata