context-save

An agent skill by garrytan, from garrytan/gstack. Tags: local-workflow, setup, workflow.

What it does

Save working context. (gstack)

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add garrytan/gstack --skill context-save

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/garrytan/gstack
cp -r gstack/context-save ~/.claude/skills/context-save

Safety box score

Grade C, moderate risk: 32 of 100 risk points, rated 2026-10-16. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

This skill is a local context-capture workflow: it reads git state, writes a checkpoint file under the user's gstack state in the home directory, and logs telemetry at the end. The main risks are shell-command execution through helper scripts, out-of-repo writes into dot-directories, and instruction-passing behavior that can change how the agent handles confirmations.

Category levels, from 0 (none) to 3 (high)
Category	Level	Why
Code & shell execution	2 (moderate)	It runs local shell commands as part of its workflow, including `~/.claude/skills/gstack/bin/gstack-skill-start`, `git rev-parse`, `git status`, `git log`, and a documented `bash -c` title-sanitizing block.
Network access	0 (none)	There is no explicit `curl`, `wget`, HTTP URL, or remote upload/download command in `SKILL.md`; the telemetry call is to a local helper path, not a named remote host.
Filesystem reach	2 (moderate)	It writes checkpoint files under `$GSTACK_STATE_ROOT/projects/$SLUG/checkpoints` and also points at `~/.gstack/`, so it modifies files outside the repo in the user's home dot-directories.
Secrets & credentials	0 (none)	The skill does not read keychains, browser sessions, tokens, or `.env` files, and it does not ask the user to paste credentials.
Privilege & persistence	0 (none)	No `sudo`, global installs, services, scheduled tasks, or shell startup edits are requested; the workflow stays in user-space paths and local helpers.
Instruction hijack surface	2 (moderate)	It tells the agent to treat the skill file as executable instructions, to follow `GSTACK_INSTRUCTION_BEGIN` blocks from tool output, and to auto-choose options in spawned/unattended sessions, which can override normal confirmation behavior.
Irreversible actions	0 (none)	The skill does not push, post, pay, book, delete, or deploy; its only effects are local note-taking and optional local telemetry.
Transparency	2 (moderate)	Core behavior depends on external helpers in `~/.claude/skills/gstack/bin/...` and `~/.claude/skills/gstack/scripts/...`, but their source is not included in the reviewed file.

Before installing

Inspect the helper binaries named in `SKILL.md` and confirm they stay local and do not phone home.
Run `/context-save list` in a scratch repo first and verify the checkpoint lands under the expected `.../checkpoints/` path.
Decide whether you're okay with persistent writes into `~/.claude/` and `~/.gstack/` before enabling the skill.

Rated 2026-10-16 by an automated review of 1 file from the skill's repository.

Source

Repository: garrytan/gstack (all skills from this repository)
Path: context-save/SKILL.md
Branch: main
Updated: 2026-10-05

context-restore — Restore working context saved earlier by /context-save. (gstack)
agents-get-started — Use when a developer wants to create a new agent project or get started with AgentCore.
devcontainers — Set up local development environments with production parity for DigitalOcean App Platform.
expo-project-structure — Framework (OSS). Folder structure for a new Expo app.
principle-build-the-lever — Apply to any non-trivial work, not just bulk work: edits, migrations, analyses, checks.
setup-benny — Configure Benny and prepare its triage and repro automations.