plan-tune
Warn
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONCOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DYNAMIC_EXECUTION]: The skill's preamble uses
evalon the output ofgstack-slugandsourceon the output ofgstack-repo-mode. This executes shell code generated at runtime by binaries within the skill's directory. - [DATA_EXPOSURE]: The preamble accesses
~/.claude.json, which is the primary configuration file for the AI agent environment. It reads this file to determine MCP server types and transport modes. - [COMMAND_EXECUTION]: The skill makes extensive use of shell commands for state management (
mkdir,rm,touch), Git operations (git branch,git add,git commit), and tool invocation (bun -e) across its preamble and various workflows. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from
learnings.jsonlandquestion-log.jsonlto provide context and review history. - Ingestion points: Files
learnings.jsonlandquestion-log.jsonlin the~/.gstack/directory. - Boundary markers: None identified for the ingestion of historical logs.
- Capability inventory: Uses
Bash,Write, andEdittools; preamble performsevalandsourceoperations. - Sanitization: Uses
bunto parse JSON data, providing structural validation but not content sanitization. - [EXTERNAL_DOWNLOADS]: The skill includes logic to synchronize an artifacts repository using
git fetchandgit mergeif a remote source is detected. It also checks for updates via a local binary. - [DATA_EXFILTRATION]: The skill includes opt-in telemetry that sends usage data (skill name, duration, session ID) to an external service using the
gstack-telemetry-logbinary.
Audit Metadata