design-consultation

An agent skill by garrytan, from garrytan/gstack. Tags: brainstorming, design, research, ui-ux.

What it does

Design consultation: understands your product, researches the landscape, proposes a complete design system (aesthetic, typography, color, layout, spacing, motion), and generates font+color preview... (gstack)

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add garrytan/gstack --skill design-consultation

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/garrytan/gstack
cp -r gstack/design-consultation ~/.claude/skills/design-consultation

Safety box score

Grade D, elevated risk: 58 of 100 risk points, rated 2026-10-16. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

This skill builds and writes a design system for a repo, including `DESIGN.md`, optional `CLAUDE.md`, preview artifacts, and local gstack state. Its main risks are that it runs shell tools and external browser/web services, and it contains strong internal instructions that can suppress normal confirmation flow in some modes.

Category levels, from 0 (none) to 3 (high)
Category	Level	Why
Code & shell execution	2 (moderate)	It repeatedly runs shell and native tools such as `~/.claude/skills/gstack/bin/gstack-skill-start`, `bun ... gstack-design-md.ts`, `aside repl`, and `codex exec`, so installing it grants real code execution inside the user's environment.
Network access	2 (moderate)	It uses `WebSearch`, Aside browser research, external Codex review, and a board reload via `curl -sS -X POST "${BOARD_URL}api/reload"`, so product context and research queries can leave the machine.
Filesystem reach	2 (moderate)	It writes and updates repo files like `DESIGN.md` and `CLAUDE.md`, creates backups and artifacts under `~/.gstack/` and project design directories, and includes temp cleanup like `trap 'rm -rf "$__OUTSIDE_TMP"' EXIT`.
Secrets & credentials	1 (low)	It does not ask for passwords or tokens, but it explicitly operates on the user's signed-in browser sessions in Aside (`"session is already logged in"`), so authenticated page content may be exposed during research.
Privilege & persistence	1 (low)	It does not require sudo or service install, but it does modify local config and repo-adjacent settings such as `gstack-config set`, `.git/info/exclude`, and `CLAUDE.md`.
Instruction hijack surface	3 (high)	It tells the agent to treat the skill file as executable instructions, follow one-time instruction blocks from tool output, and in spawned/unattended sessions to auto-choose options instead of asking, which is a strong consent-bypass pattern.
Irreversible actions	2 (moderate)	Its purpose includes creating and writing a design source of truth and preview artifacts, and optionally updating `CLAUDE.md`; it does not deploy or send messages, but it does make lasting project changes after approval.
Transparency	1 (low)	Most behavior is readable, but it depends on external installed binaries and compiled tools like `aside`, `design/dist/design`, and `codex` probes, so parts of the workflow are not visible in the shipped markdown.

Before installing

Read `SKILL.md` and `sections/proposal-and-preview.md` if you do not want a skill that can write `DESIGN.md` and `CLAUDE.md`.
Decide whether you are okay with it using external web research and your signed-in Aside browser session for competitive analysis.
Check whether you want local gstack state and cross-project learnings under `~/.gstack/` to be touched.
If you care about confirmation gates, note the spawned/unattended auto-decision paths before letting an agent run it.

Rated 2026-10-16 by an automated review of 3 files from the skill's repository.

Source

Repository: garrytan/gstack (all skills from this repository)
Path: design-consultation/SKILL.md
Branch: main
Updated: 2026-10-05

design-shotgun — Design shotgun: generate multiple AI design variants, open a comparison board, collect structured feedback, and iterate. (gstack)
design-style-picker — Batch-generate and compare visual design directions so a user can choose the style they actually want.
enhance-prompt — Transforms vague UI ideas into polished, Stitch-optimized prompts.
expo-design-system — Framework (OSS). Build and maintain a design system inside an Expo app - a reusable theme of design tokens (color, spacing, typography, radius, shadow.
expo-native-ui — Framework (OSS). Build beautiful, native-feeling Expo screens.
expo-ui — Framework (OSS). Build native UI with the @expo/ui package: real SwiftUI on iOS and Jetpack Compose on Android.