Parallel Orchestrate

• Analyzed: May 13, 2026, 9:11 PM
• Findings: 1
• Version: 1.6.0
• Hash: 288f53a98220ec5a1ae749bbf40a89c9fe0ffa1d893abe82bf8568bca3afb68d
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill performs complex git orchestration and subagent management but includes high-risk behaviors, specifically the use of `eval` on the output of a local binary (`gstack-slug`) in SKILL.md (Phase 0.3), which presents a shell injection vulnerability. Additionally, it implements a telemetry system that writes session data to `~/.gstack/analytics/` and invokes an external binary (`gstack-telemetry-log`) for potential remote data exfiltration. While these features are documented as part of the 'gstack' ecosystem's performance tracking, the combination of insecure execution patterns and telemetry hooks meets the threshold for a suspicious classification.