What the tech

Search

/ opens search from anywhere. Esc closes it.

Tools

Get the newsletter

gstack: a Claude Code skill by Garry Tan

For people running Garry Tan's gstack workflows on Capy cloud machines or Claude Code. Skip it if you want one standalone skill or do not want an installer that clones and updates code.

High-risk warning At least one scanner rated it high risk, so we keep it out of the top ten. Read its code before you install it.

Before you install: It tells Claude to run an installer at session start that clones and auto-updates code from GitHub and installs a runtime, and its own text says not to run that installer on a personal device without permission.

The skill's text changed on Nov 9, 2026, after we last read it. Our description may be behind.

Score
70of 100
Rank
#175of 239
Installs
24.7Kon skills.sh
Security
Warning 5 scanners
Updated
2026
Context
~52tokens always

Install

npx skills add https://github.com/garrytan/gstack --skill gstack

Run it in your terminal. View the source

Using the Claude app rather than Claude Code? You can add a skill there too. How to add it in the app

What does gstack do?

gstack is a skill that checks for, installs and routes to the gstack workflow suite, with most of its text written for Capy cloud machines. At session start Claude runs scripts/install.sh --check and reads a PASS, FAIL, SKIP or WARN row per component plus a final gstack: ok or fail line. Before the first workflow it installs with --for <skill>, which clones the repo, adds a checksum-verified Bun and fast-forwards older checkouts. It then reads the router SKILL.md under ~/.claude/skills and the chosen workflow, such as /autoplan or /ship. New work must start with an /autoplan plan, get the owner's word, and pass /ship before a PR is called ready.

When should you use gstack?

Use it when

  • You already use gstack's autoplan, review or ship workflows
  • You run agents on Capy and want gstack checked per machine
  • You want plan approval before any code is built

Skip it when

  • You do not want code cloned into ~/.local/share/gstack
  • You want a single small skill, not a full suite
  • You are on a personal laptop without installer approval

What it needs and what it can touch

You need

  • Git, curl, Node.js, flock and timeout
  • Bun (the installer can fetch one)
  • A Capy workspace for most of the flows it describes

What it can do

  • Runs shell commands, including an installer script
  • Clones and fast-forwards the gstack repo from GitHub
  • Installs Bun and a ~/.local/bin shim
  • Reads and edits project files and opens pull requests

From reading its instructions, not from running it.

Why it scores 70

Strongest on upkeep (100 of 100), weakest on adoption (50).

  • Adoption35 points 50
  • Upkeep20 points 100
  • Trust20 points 51
  • Quality15 points 100
  • Reader answers10 points Not enough answers yet, so this does not count

How the formula works

Is gstack safe to install?

At least one scanner rated it high risk, so we keep it out of the top ten. Read its code before you install it. Scanners often miss what other scanners catch, and a skill can change after a scan. Read its source before you install it.

ScannerResultDate
Gen Agent Trust HubPassedSep 15, 2026
SocketMedium riskSep 29, 2026
SnykMedium riskOct 5, 2026
RunlayerHigh riskMar 14, 2026
ZeroLeaksMedium riskApr 16, 2026

Details

Installs
24,689
Repository stars
141,158
Last repository change
Tokens always loaded
about 52
Tokens when used
about 5,521
License
MIT
Data confidence
High

Alternatives to gstack

All skills for this job