benchmark-models
“Cross-model benchmark for gstack skills. (gstack)”
aipkg.jsonLICENSE.txtREADME.mdSKILL.mdSKILL.md.tmpl- 01SDI-385%MEDIUM
SKILL.md:33
detailhide
The preamble executes code that directly accesses and modifies user home directory structures (~/.gstack/, ~/.claude/) without explicit user permissions or declared consent. This allows unauthorized persistent state creation and modification. An adversarial skill could hide tracking mechanisms, inject credentials, or establish persistence.
31## Preamble (run first)3233```bash34_UPD=$(~/.claude/skills/gstack/bin/gstack-update-check 2>/dev/null || .claude/skills/gstack/bin/gstack-update-check 2>/dev/null || true)35[ -n "$_UPD" ] && echo "$_UPD" || truefix Explicitly declare in skill metadata what state is read/written (e.g., `declared-state: ~/.gstack/sessions, ~/.gstack/analytics`). Add user confirmation before any home directory modifications. Use a single declared state file instead of scattered directory access. Document the exact operations (mkdir, touch, write) in a permissions manifest.
- 02SDI-280%MEDIUM
SKILL.md:33
detailhide
The preamble executes multiple external binaries (~/.claude/skills/gstack/bin/gstack-*) without integrity verification, version pinning, or justification. A compromised gstack installation or MITM attack could inject arbitrary commands. Git state is read without validation, allowing repository state leakage.
31## Preamble (run first)3233```bash34_UPD=$(~/.claude/skills/gstack/bin/gstack-update-check 2>/dev/null || .claude/skills/gstack/bin/gstack-update-check 2>/dev/null || true)35[ -n "$_UPD" ] && echo "$_UPD" || truefix Verify binary SHA256 checksums before execution. Pin binary versions in skill metadata. Use whitelisted, read-only operations only. Document why each external binary is necessary. Remove unnecessary git operations (git branch, git rev-parse) unless essential to skill purpose.