plan-tune
“Self-tuning question sensitivity + developer psychographic for gstack (v1: observational). (gstack)”
aipkg.jsonLICENSE.txtREADME.mdSKILL.mdSKILL.md.tmpl- 01SQP-275%MEDIUM
SKILL.md.tmpl:214
detailhide
Multiple file write operations to persistent user configuration files (developer-profile.json, .question-tuning-prompted markers) are performed via bash/bun without explicit user confirmation in several code paths. This violates the stated principle that 'Agent-interpreted free-form edits are a trust boundary' and enables silent, persistent modifications to user preferences and state that could affect future skill behavior across sessions.
212 `~/.gstack/developer-profile.json` under `declared.{dimension}`:213214 ```bash215 # Ensure profile exists216 ~/.claude/skills/gstack/bin/gstack-developer-profile --read >/dev/nullfix Add explicit AskUserQuestion confirmation before each file write operation that persists user state, especially in the 5-Q setup flow and edit-declared-profile sections. Ensure the user sees exactly what will be written before confirmation is requested. Store the confirmed choice and only proceed to write after explicit Y from AskUserQuestion.