Atlas / Skills / stacksjs / Stacks Api

Stacks ApiCAUTION

skills/stacksjs/stacks-api

Modern, performant, optimized for DX/AX. Develop powerful apps, clouds & framework-agnostic libraries—faster.

Verdict
CAUTION
Grade
B
Trust score
89 /100
Version
—
Hosts
—
License
MIT
Stars
632
01

Overview

Modern, performant, optimized for DX/AX. Develop powerful apps, clouds & framework-agnostic libraries—faster.

Read from source at commit 9ab2671cc51fOBSERVED · 2026-10-13
02

Trust audit

CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.

LayerWhat it checksResult
L0Provenance & inventoryWARN
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfaceWARN
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
UNDECLARED (2 observation(s))
Network
none-observed
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (4)

MEDIUMInventory / provenance · inv.symlink · CWE-1104
storage/public
storage/public
Why it matters. link not followed
MEDIUMInventory / provenance · skill.no_skill_md · CWE-1104
Why it matters. no SKILL.md at the audited path
Fix. a skill without its instruction file cannot be reviewed as one
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
storage/framework/defaults/functions/commerce/shippings/license-keys.ts:1
import type { LicenseKeys, NewLicenseKey } from '../../../types/defaults'
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
storage/framework/defaults/functions/commerce/shippings/license-keys.ts:2
import { dashboardApi } from '../../dashboard-api'

Gates applied: no_behavioural_pass.

Audited 2026-10-13 · audit v0.4.1 · source sha 9ab2671cc51ffull audit observations/trust-audit/skill/stacksjs__stacks-api.json · Report an issue / request a re-scan
03

Audit history

Every audit this skill has had.

DateSourceVerdictGradeScoreChange
2026-10-139ab2671cc51fCAUTIONB89first audit
04

Questions

What does the Stacks Api skill do?

Modern, performant, optimized for DX/AX. Develop powerful apps, clouds & framework-agnostic libraries—faster.

Is Stacks Api safe to install?

With care. The audit graded it B (89/100) and found 4 things worth knowing before you trust this skill, listed below with the exact line each was found on.

What can Stacks Api access on my machine?

The audit observed that it reads or writes files. At least one of those is not mentioned in its own description, which is itself a finding. Secrets in the source: none found.

How current is this page?

The grade is for one exact copy of the source (9ab2671cc51f), read on 2026-10-13. The repository is watched, and a new audit runs when it changes — this is the first audit.

Advertisement