devex-review
“Live developer experience audit. (gstack)”
aipkg.jsonLICENSE.txtREADME.mdSKILL.mdSKILL.md.tmpl- 01SDI-285%MEDIUM
SKILL.md.tmpl:73
detailhide
The skill executes gstack-specific internal tooling (gstack-slug, gstack-review-read, gstack-review-log) via bash without explicit user consent or clear transparency about what these tools do. These internal utilities could have unintended side effects, access sensitive paths (~/.claude/skills/gstack/), or exfiltrate data to external systems. Users are not warned that proprietary internal tooling will be invoked.
7172```bash73eval "$(~/.claude/skills/gstack/bin/gstack-slug 2>/dev/null)"74~/.claude/skills/gstack/bin/gstack-review-read 2>/dev/null | grep plan-devex-review || echo "NO_PRIOR_PLAN_REVIEW"75```fix (1) Add explicit warnings in the skill header documenting all external utilities that will be executed and their purpose. (2) Require users to explicitly consent before running gstack-specific tooling. (3) Document what data these utilities read/write and to what destinations. (4) Make all gstack dependencies optional with graceful fallbacks if they're unavailable.
- 02SDI-390%MEDIUM
SKILL.md.tmpl:209
detailhide
The skill writes structured JSON telemetry data to a remote logging/dashboard system via gstack-review-log without explicit user notification or consent. This could transmit project details, scoring results, URLs tested, and other sensitive context to an external service. Users may not realize their DX audit results are being logged remotely.
207208```bash209~/.claude/skills/gstack/bin/gstack-review-log '{"skill":"devex-review","timestamp":"TIMESTAMP","status":"STATUS","overall_score":N,"product_type":"TYPE","tthw_measured":"TTHW","dimensions_tested":N,"dimensions_inferred":N,"boomerang":"YES_OR_NO","commit":"COMMIT"}'210```211fix (1) Add prominent warnings that telemetry/logging will occur before execution. (2) Allow users to opt-out of remote logging. (3) Document exactly what fields are transmitted and to which endpoint. (4) Provide a local-only mode that stores results without remote transmission. (5) Encrypt or redact sensitive fields before transmission.
- 03SQP-275%MEDIUM
SKILL.md.tmpl:73
detailhide
The skill silently executes arbitrary bash commands that invoke gstack utilities without warning users about the security implications. Bash execution can modify files, read sensitive data, or interact with external services. Users triggering this skill via voice or text are not warned that local bash commands will be executed.
7172```bash73eval "$(~/.claude/skills/gstack/bin/gstack-slug 2>/dev/null)"74~/.claude/skills/gstack/bin/gstack-review-read 2>/dev/null | grep plan-devex-review || echo "NO_PRIOR_PLAN_REVIEW"75```fix (1) Add a clear warning before bash execution that states exactly which commands will be run. (2) Show users the bash command text and ask for confirmation before executing. (3) Restrict bash to read-only operations where possible (use grep, cat with explicit allowlists). (4) Document why bash is necessary and what commands will be invoked.
- 04SQP-270%MEDIUM
SKILL.md.tmpl:5
detailhide
The skill uses the browse tool to navigate to arbitrary URLs without sufficient warnings. Users may not realize that triggering this skill will cause their agent to visit external websites, potentially exposing project URLs, docs URLs, or other sensitive endpoints to external parties (via HTTP referrers, server logs, etc.). The BROWSE_SETUP template content is not shown but appears to enable unconstrained browsing.
3preamble-tier: 34version: 1.0.05description: |6 Live developer experience audit. Uses the browse tool to actually TEST the7 developer experience: navigates docs, tries the getting started flow, timesfix (1) Add explicit warnings that external URLs will be visited and list example categories (docs, dashboards, playgrounds). (2) Require users to explicitly approve URL targets before browsing begins. (3) Document privacy implications of visiting external sites. (4) Implement a URL allowlist or restrict browsing to declared project URLs from metadata only. (5) Strip or redact sensitive URL parameters before transmission.