design-review

An agent skill by garrytan, from garrytan/gstack. Tags: design, review, ui-ux, validation.

What it does

Designer's eye QA: finds visual inconsistency, spacing issues, hierarchy problems, AI slop patterns, and slow interactions — then fixes them. (gstack)

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add garrytan/gstack --skill design-review

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/garrytan/gstack
cp -r gstack/design-review ~/.claude/skills/design-review

Safety box score

Grade F, high risk: 88 of 100 risk points, rated 2026-10-16. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

This is a high-power design-fix skill: it drives a browser, edits source, commits changes, and can call external services like Aside, WebSearch, and Codex. The main risks are prompt-injection from tool output, access to signed-in browser sessions, and networked downloads/third-party review tools that expand the blast radius beyond the repo.

Category levels, from 0 (none) to 3 (high)
Category	Level	Why
Code & shell execution	3 (high)	It explicitly runs Bash, Bun, browser automation, and external CLIs like `gstack-skill-start`, `aside repl`, and `codex exec`, so it can execute code and shell commands.
Network access	3 (high)	It downloads an engine from GitHub releases and uses WebSearch/Aside/Codex against external services, so code and page data can leave the machine.
Filesystem reach	2 (moderate)	It writes to `~/.claude/skills/gstack`, `~/.gstack`, `.git/info/exclude`, and report/debug artifacts, and it also deletes temp trees with `rm -rf` cleanup.
Secrets & credentials	3 (high)	The browser workflow is built around the user's real browser and signed-in sessions, and it can import real-browser cookies or access authenticated pages.
Privilege & persistence	2 (moderate)	It changes persistent local configuration and git settings via `gstack-config` and setup/bootstrap steps, but it does not require sudo or service registration.
Instruction hijack surface	3 (high)	It tells the agent to follow `GSTACK_INSTRUCTION_BEGIN` blocks from tool output and to treat the skill file as executable instructions, which creates a prompt-injection channel.
Irreversible actions	3 (high)	Its purpose is to mutate local or live targets, fill forms, and commit fixes atomically, so it can change real user state after one run.
Transparency	2 (moderate)	Core steps depend on external binaries and services (`aside`, `codex`, `gstack-design-detect.ts`, `gstack-codex-probe`) that are not fully inspectable from the skill text.

Before installing

Run it on a throwaway local target first, not a real account, so you can see what it mutates.
Inspect `SKILL.md` around `gstack-skill-start`, browser setup, and Codex/outside review to confirm you accept the external tool and network dependence.
Check whether you are OK with persistent writes under `~/.gstack/`, `~/.claude/skills/gstack/`, and `.git/info/exclude`.
If you only want an audit, make sure the fix loop and atomic commit behavior are disabled or tightly scoped before you let it run.

Rated 2026-10-16 by an automated review of 1 file from the skill's repository.

Source

Repository: garrytan/gstack (all skills from this repository)
Path: design-review/SKILL.md
Branch: main
Updated: 2026-10-05

expo-design-system — Framework (OSS). Build and maintain a design system inside an Expo app - a reusable theme of design tokens (color, spacing, typography, radius, shadow.
ios-design-review — Visual design audit for iOS apps on real hardware. (gstack)
plan-design-review — Designer's eye plan review — interactive, like CEO and Eng review. (gstack)
emil-design-eng — This skill encodes Emil Kowalski's philosophy on UI polish, component design, animation decisions, and the invisible details that make software feel great.
prototype — Build a throwaway prototype to answer a design question.
review-animations — Reviews animation and motion code against a high craft bar derived from Emil Kowalski's design engineering philosophy. Default to flagging; approval is earned.