gstack is Garry Tan’s public release of a large, Claude Code-centric, multi-host skill stack: on the order of 23 specialist slash workflows, eight “power” tools, MIT license, no paywall. The README leads with a reproducible take on “logical” change and line counts (On the LOC Controversy) and with GitHub contribution density (2026 vs 2013) on the author’s own repositories—then argues for gstack as the sprint process he uses in the open.
This ExplainX note is a map, not a replacement for upstream docs. github.com/garrytan/gstack is canonical for install commands, slash names, and per-release features (for example the v0.19 CLIs mentioned in the README). Browse gstack on ExplainX: explainx.ai/skills/gstack (pre-filtered skills registry view).
The thesis
Turn a long chat into a repeatable sprint where the output of one slash skill feeds the next: think → plan → build → review → test → ship → reflect.
Upstream frames that as a process, not a grab bag of prompts. It overlaps the “skills compound if you chain them” idea in our agent skills guide, at YC-style cadence.
The skill map (at a glance)
| Archetype | Examples (see latest README) |
|---|---|
| Product and planning | /office-hours, /plan-ceo-review, /plan-eng-review, /plan-design-review, /plan-devex-review, /autoplan |
| Design | /design-consultation, /design-shotgun → /design-html (Pretext-style responsive layout, framework detection—see docs) |
| Code quality | /review (Claude), /codex (OpenAI Codex CLI “second opinion” with multiple modes), /investigate |
| Runtime truth | /qa / /qa-only, /browse, /open-gstack-browser, /setup-browser-cookies |
| Security | /cso (OWASP + STRIDE, per upstream copy) |
| Release | /ship, /land-and-deploy, /canary, /benchmark, /document-release |
| Meta | /retro, /learn, optional checkpoint mode with /context-restore, /gstack-upgrade |
| Safety | /careful, /freeze, /guard, /unfreeze |
| Multi-agent | /pair-agent (shared GStack Browser with tab isolation, optional remote use—see docs) |
Philosophy per skill: docs/skills.md. Builder framing: ETHOS.md.
How you install it
- Solo — shallow clone into
~/.claude/skills/gstack, run./setup, add aCLAUDE.mdgstack block that (a) routes web work through/browseand (b) lists slash commands. The long canonical list is only in the upstream README; do not copy stale lists from blogs. - Team —
gstack-team-initin required or optional mode commits.claude/metadata so peers auto-install;setup --teamplus silent hourly update checks. - OpenClaw — spawn Claude Code with gstack loaded, or use ClawHub “native” skills for a subset. See docs/OPENCLAW.md.
- Other coding agents —
./setup --host <name>to install under paths such as~/.codex/skills/,~/.cursor/skills/, and others listed in the README. Extending a host: docs/ADDING_A_HOST.md.
Requirements (per README): Claude Code, Git, Bun 1+; Windows also Node (Playwright + Bun pipe issue—upstream documents fallback to Node).
Design, browser automation, and security
- Shotgun → HTML — variant mockups (the README cites GPT Image-class generation in places), a browser comparison board, and
gstack-taste-updateto persist what you keep vs reject. - Browse stack — GStack Browser with a sidebar mini-agent,
$B handofffor MFA or CAPTCHAs, and a substantial prompt-injection story (classifiers, canary tokens, optional heavier ensemble, kill-switch env vars).
Before you aim this at untrusted pages or a compliance boundary, read ARCHITECTURE.md and BROWSER.md. This post is not a security audit.
Parallel sprints, CLIs, and ecosystem
- Conductor and the README’s “10–15 parallel sprints” are presented as a human coordination layer on many isolated Claude Code sessions: process tames agent proliferation, not the reverse.
- CLIs (the README cites v0.19+):
gstack-model-benchmark(Claude, GPT, Gemini;--dry-runto validate),gstack-taste-update(persist design shotgun taste). /codexis a cross-model second opinion on the same diffs as/review, with overlap/unique-finding analysis when both have run.- Checkpoint mode (opt-in) auto-commits WIP with structured
[gstack-context];/shipis documented to squash or filter WIP commits in a bisect-safe way (see the README).
Privacy and telemetry (per README)
- Default off; first run asks. If enabled, only skill name, duration, success, version, OS.
- Never (claimed in README): code, file paths, prompts, branch names.
- Supabase + edge functions; schema in
supabase/migrations/. Localgstack-analyticson JSONL.
A minimal “try it” path
- Install per Install — 30 seconds.
- Run
/office-hourson a real user pain, not a feature wish list. - Run
/reviewon a real branch. - If it clicks, add
/qaon a staging URL, then/ship.
Hiring (upstream README): Y Combinator — software (not affiliated with ExplainX; listed for completeness).
Read next (ExplainX)
- What are agent skills? Complete guide
- MCP: Model Context Protocol
- Caveman: token economics for agents
- Claude Code, Pro, and the April 2026 pricing test
The GitHub default branch README and CHANGELOG are the canonical feature and version sources; star counts and social screenshots go stale in hours.