gstack: a Claude Code skill by Garry Tan
For people running Garry Tan's gstack workflows on Capy cloud machines or Claude Code. Skip it if you want one standalone skill or do not want an installer that clones and updates code.
High-risk warning At least one scanner rated it high risk, so we keep it out of the top ten. Read its code before you install it.
Before you install: It tells Claude to run an installer at session start that clones and auto-updates code from GitHub and installs a runtime, and its own text says not to run that installer on a personal device without permission.
The skill's text changed on Nov 9, 2026, after we last read it. Our description may be behind.
- Score
- 70of 100
- Rank
- #175of 239
- Installs
- 24.7Kon skills.sh
- Security
- Warning 5 scanners
- Updated
- 2026
- Context
- ~52tokens always
Install
npx skills add https://github.com/garrytan/gstack --skill gstack
Run it in your terminal. View the source
Using the Claude app rather than Claude Code? You can add a skill there too. How to add it in the app
What does gstack do?
gstack is a skill that checks for, installs and routes to the gstack workflow suite, with most of its text written for Capy cloud machines. At session start Claude runs scripts/install.sh --check and reads a PASS, FAIL, SKIP or WARN row per component plus a final gstack: ok or fail line. Before the first workflow it installs with --for <skill>, which clones the repo, adds a checksum-verified Bun and fast-forwards older checkouts. It then reads the router SKILL.md under ~/.claude/skills and the chosen workflow, such as /autoplan or /ship. New work must start with an /autoplan plan, get the owner's word, and pass /ship before a PR is called ready.
When should you use gstack?
Use it when
- You already use gstack's autoplan, review or ship workflows
- You run agents on Capy and want gstack checked per machine
- You want plan approval before any code is built
Skip it when
- You do not want code cloned into ~/.local/share/gstack
- You want a single small skill, not a full suite
- You are on a personal laptop without installer approval
What it needs and what it can touch
You need
- Git, curl, Node.js, flock and timeout
- Bun (the installer can fetch one)
- A Capy workspace for most of the flows it describes
What it can do
- Runs shell commands, including an installer script
- Clones and fast-forwards the gstack repo from GitHub
- Installs Bun and a ~/.local/bin shim
- Reads and edits project files and opens pull requests
From reading its instructions, not from running it.
Why it scores 70
Strongest on upkeep (100 of 100), weakest on adoption (50).
Is gstack safe to install?
At least one scanner rated it high risk, so we keep it out of the top ten. Read its code before you install it. Scanners often miss what other scanners catch, and a skill can change after a scan. Read its source before you install it.
| Scanner | Result | Date |
|---|---|---|
| Gen Agent Trust Hub | Passed | Sep 15, 2026 |
| Socket | Medium risk | Sep 29, 2026 |
| Snyk | Medium risk | Oct 5, 2026 |
| Runlayer | High risk | Mar 14, 2026 |
| ZeroLeaks | Medium risk | Apr 16, 2026 |
Details
- Installs
- 24,689
- Repository stars
- 141,158
- Last repository change
- Tokens always loaded
- about 52
- Tokens when used
- about 5,521
- License
- MIT
- Data confidence
- High
Did it do the job for you?
Alternatives to gstack
All skills for this job-
Get Compound EngineeringCompound Engineering
For developers who want Claude to plan, build, review and ship work in fixed stages with saved plans.
-
Get create-payment-credentialcreate-payment-credential
For people who want Claude to buy things for them from a Link wallet, approving each spend in the Link app.
-
Get lavishlavish
For people who want plans, diffs and comparisons as HTML pages they can mark up and send back.
-
Get review-prreview-pr
For teams running automated PR reviews in CI who want structured JSON output instead of direct GitHub posts.