gstack-sprint

Pass

Audited by Gen Agent Trust Hub on Jun 27, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute standard shell commands (git, ls, sed, basename) to retrieve the project's repository name, organization, and local path to design documents. These operations are limited to gathering metadata for the current development environment and accessing the skill's dedicated data directory (~/.gstack/projects/).
  • [SAFE]: The skill implements strict state management by requiring explicit user approval (via AskUserQuestion) before moving from Design to Execution and from Execution to Review. This prevents autonomous or unintended code execution.
  • [SAFE]: Data access is confined to the local project repository and the author's specific configuration directory (~/.gstack). No network exfiltration or access to sensitive global credentials (e.g., ~/.ssh, .env) was detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 27, 2026, 05:12 PM
Security Audit — agent-trust-hub — gstack-sprint