ios-design-review

An agent skill by garrytan, from garrytan/gstack. Tags: design, ios, review, ui-ux.

What it does

Visual design audit for iOS apps on real hardware. (gstack)

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add garrytan/gstack --skill ios-design-review

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/garrytan/gstack
cp -r gstack/ios-design-review ~/.claude/skills/ios-design-review

Safety box score

Grade D, elevated risk: 49 of 100 risk points, rated 2026-10-19. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

This skill drives a real iPhone QA flow, takes screenshots of app screens, and writes review artifacts and logs into the user’s home state. The main risks are local command execution, network access to the QA daemon/telemetry, and a broad runtime-instructions surface that can change behavior based on tool output.

Category levels, from 0 (none) to 3 (high)
Category	Level	Why
Code & shell execution	2 (moderate)	It explicitly runs shell commands and shipped tooling, starting with `~/.claude/skills/gstack/bin/gstack-skill-start --skill "ios-design-review" --model "claude"` and ending with `gstack-skill-end`.
Network access	2 (moderate)	It talks to a QA daemon and HTTP endpoints like `POST /session/acquire`, `GET /screenshot`, and `GET /elements`, so screenshots and session data can leave the local process.
Filesystem reach	2 (moderate)	It writes outside the project into `$GSTACK_STATE_ROOT/projects/<slug>/ios-design-review-<date>.md` and uses home-dotdir state like `~/.gstack/` and `~/.claude/skills/gstack/bin/`.
Secrets & credentials	1 (low)	The skill inspects live device screenshots from a real iPhone, so any sensitive data visible on screen can be captured into the review flow, but it does not explicitly read keychains, tokens, or password stores.
Privilege & persistence	0 (none)	There is no sudo, global install, service registration, shell startup edit, or OS-level privilege change in the skill text.
Instruction hijack surface	3 (high)	It tells the model to `Treat the skill file as executable instructions`, to follow `Instruction blocks` from tool output, and to auto-choose options in spawned sessions, which is a strong runtime instruction-following surface.
Irreversible actions	0 (none)	The skill is read-only QA and reporting; it does not publish, deploy, pay, book, delete, or send user-visible messages on its own.
Transparency	2 (moderate)	The workflow depends on external scripts and a daemon (`gstack-skill-start`, `gstack-ios-qa-daemon`) that are not shown in the reviewed markdown, so key behavior lives outside the visible source.

Before installing

Read the helper scripts it calls, especially `~/.claude/skills/gstack/bin/gstack-skill-start` and any `gstack-ios-qa-daemon` code, before trusting the workflow.
Confirm the daemon is truly observe-only and cannot tap the device, mutate app state, or exfiltrate screenshots anywhere unexpected.
Check exactly where `$GSTACK_STATE_ROOT/projects/<slug>/ios-design-review-<date>.md` and `~/.gstack/` logs will be written.
Run one test session on a non-sensitive device/account first and inspect the saved screenshots and logs.

Rated 2026-10-19 by an automated review of 1 file from the skill's repository.

Source

Repository: garrytan/gstack (all skills from this repository)
Path: ios-design-review/SKILL.md
Branch: main
Updated: 2026-10-05

expo-design-system — Framework (OSS). Build and maintain a design system inside an Expo app - a reusable theme of design tokens (color, spacing, typography, radius, shadow.
design-review — Designer's eye QA: finds visual inconsistency, spacing issues, hierarchy problems, AI slop patterns, and slow interactions — then fixes them. (gstack)
plan-design-review — Designer's eye plan review — interactive, like CEO and Eng review. (gstack)
emil-design-eng — This skill encodes Emil Kowalski's philosophy on UI polish, component design, animation decisions, and the invisible details that make software feel great.
expo-native-ui — Framework (OSS). Build beautiful, native-feeling Expo screens.
expo-ui — Framework (OSS). Build native UI with the @expo/ui package: real SwiftUI on iOS and Jetpack Compose on Android.