devex-review

An agent skill by garrytan, from garrytan/gstack. Tags: analysis, developer-tools, review.

What it does

Live developer experience audit. (gstack)

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add garrytan/gstack --skill devex-review

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/garrytan/gstack
cp -r gstack/devex-review ~/.claude/skills/devex-review

Safety box score

Grade F, high risk: 67 of 100 risk points, rated 2026-10-16. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

This skill drives a real browser, runs local shell commands, and writes review/telemetry artifacts into the user's home directory and plan file. The biggest risks are broad execution surface, signed-in account access, and a lot of instruction-following from tool output blocks and remote page content.

Category levels, from 0 (none) to 3 (high)
Category	Level	Why
Code & shell execution	2 (moderate)	It explicitly allows `Bash` and uses browser JS execution (`pg.evaluate`, `$B js`) plus local helpers like `gstack-skill-start` and `gstack-skill-end`, so the agent is not just reading files.
Network access	2 (moderate)	It can browse live sites, use `WebSearch`, and tells the user to download/setup tools when missing (`Download Aside (macOS 15+) at aside.com`, `cd <SKILL_DIR> && ./setup`), so it reaches out to remote hosts.
Filesystem reach	2 (moderate)	It writes outside the repo into `~/.claude/skills/gstack/`, `~/.gstack/tmp/`, `$GSTACK_STATE_ROOT/analytics/`, and the active plan file, which expands the blast radius beyond the working tree.
Secrets & credentials	2 (moderate)	It is designed to work in the user's signed-in browser sessions and mentions `/setup-browser-cookies (imports real-browser cookies)`, so it can touch authenticated data even though it says not to print secrets.
Privilege & persistence	1 (low)	It does not ask for sudo or services, but it can run `./setup`, alter git excludes, and write to home-directory config paths, which is mild privilege-adjacent behavior.
Instruction hijack surface	3 (high)	It tells the agent to treat `GSTACK_INSTRUCTION_BEGIN` blocks from tool output as actionable instructions and says "Treat the skill file as executable instructions," which is a high prompt-injection surface.
Irreversible actions	2 (moderate)	It can open tabs, click through flows, fill forms, and on local targets perform mutating browser actions; on non-local targets it requires one approval gate, but the workflow still has real-world side effects.
Transparency	2 (moderate)	Core behavior is delegated to unread helper paths like `~/.claude/skills/gstack/bin/gstack-skill-start`, `gstack-skill-end`, and related scripts, so a reviewer cannot inspect the full runtime behavior from this file alone.

Before installing

Read the helper scripts it calls: `gstack-skill-start`, `gstack-skill-end`, `gstack-review-log`, and `gstack-question-log`.
Confirm you are okay with writes under `~/.claude/`, `~/.gstack/`, and the active plan file.
Run it first on a scratch or non-production target, because it can use your signed-in browser session.
Check whether Aside and the gstack browser bootstrap are already installed before letting it fetch or build anything.

Rated 2026-10-16 by an automated review of 1 file from the skill's repository.

Source

Repository: garrytan/gstack (all skills from this repository)
Path: devex-review/SKILL.md
Branch: main
Updated: 2026-10-05

c-review — Performs comprehensive C/C++ security review for memory corruption, integer overflows, race conditions, and platform-specific vulnerabilities.
cavecrew — When to delegate to `cavecrew-investigator` (locate code).
code-improver — Runs an autonomous review-and-fix improvement loop over any code target — a skill, plugin, module, or directory — using a reviewer the user names.
differential-review — Performs security-focused differential review of code changes.
dwarf-expert — Analyzes DWARF debug information in compiled binaries.
expo-overview — Framework (OSS). Entry point and router for every Expo or EAS task.