plan-tune
Pass
Audited by Gen Agent Trust Hub on May 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill's preamble and workflows execute various local binaries and scripts located in
~/.claude/skills/gstack/bin/to manage configurations, logs, and telemetry settings. - [REMOTE_CODE_EXECUTION]: Shell commands utilize
evalandsourceon the output of local binaries likegstack-slugandgstack-repo-modeto dynamically update the agent's execution environment. - [DATA_EXFILTRATION]: The skill facilitates data synchronization via 'GBrain Sync,' which can push session memory to a private GitHub repository, and it transmits usage telemetry (including skill name and duration) to remote endpoints.
- [EXTERNAL_DOWNLOADS]: The skill performs network operations via
git fetchandgit mergeto synchronize the local 'brain' repository with its remote origin on GitHub. - [COMMAND_EXECUTION]: Dynamic JavaScript code is generated and executed using
bun -eto update JSON profile files, utilizing template interpolation for persisting user preferences.
Audit Metadata