context-save
“Save working context. (gstack)”
aipkg.jsonLICENSE.txtREADME.mdSKILL.mdSKILL.md.tmpl- 01SDI-275%MEDIUM
SKILL.md:54
detailhide
The skill collects telemetry data (skill name, timestamp, repo name) and appends it to ~/.gstack/analytics/skill-usage.jsonl without explicit user consent at skill invocation time. While the preamble mentions telemetry configuration, users may not realize a 'save context' operation triggers analytics logging. This violates the principle of informed consent for data collection.
52_LAKE_SEEN=$([ -f ~/.gstack/.completeness-intro-seen ] && echo "yes" || echo "no")53echo "LAKE_INTRO: $_LAKE_SEEN"54_TEL=$(~/.claude/skills/gstack/bin/gstack-config get telemetry 2>/dev/null || true)55_TEL_PROMPTED=$([ -f ~/.gstack/.telemetry-prompted ] && echo "yes" || echo "no")56_TEL_START=$(date +%s)fix Add an explicit AskUserQuestion at skill start asking the user to confirm telemetry opt-in before any analytics are written. Alternatively, document the telemetry behavior prominently in the skill description and only collect telemetry after explicit user confirmation within the current session.
- 02SDI-170%MEDIUM
SKILL.md:32
detailhide
The preamble performs extensive system configuration beyond the stated skill purpose (saving context): feature discovery, telemetry prompts, routing injection, CLAUDE.md creation, vendoring warnings, and upgrade checks. A user invoking '/context-save' to save their work is unexpectedly subjected to multiple configuration workflows, AskUserQuestions, and state mutations. This violates principle of least surprise and may confuse users about what the skill actually does.
30native rewind alias in current environments, which was shadowing this skill.3132## Preamble (run first)3334```bashfix Separate concerns: move all feature-discovery, telemetry-setup, and configuration logic into a dedicated /setup or /init skill. The preamble should perform only essential initialization (branch detection, session tracking). Document clearly that running /context-save may trigger other prompts as a side effect, or defer those prompts to a separate initial setup phase.
- 03SQP-272%MEDIUM
SKILL.md:809
detailhide
The skill writes a markdown file to ~/.gstack/projects/$SLUG/checkpoints/ with user-supplied content (title, summary, decisions, remaining work) without any preview or confirmation step. If the user accidentally invokes /context-save with incomplete or incorrect context (e.g., wrong branch state, mid-edit), the file is written immediately with no undo. The file is append-only, so mistakes accumulate.
807saved file.808809### Step 4: Write saved-context file810811Compute the path in bash (NOT in the LLM prompt) so user-supplied titles can'tfix Add an AskUserQuestion step after gathering state that shows the user a preview of the context to be saved (title, branch, files modified, summary snippet) and asks for confirmation before writing the file. Offer options to edit the title or cancel. This gives the user a chance to verify correctness before commit.