ios-fix

An agent skill by garrytan, from garrytan/gstack. Tags: bug-fix, debugging, ios.

What it does

Autonomous iOS bug fixer. (gstack)

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add garrytan/gstack --skill ios-fix

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/garrytan/gstack
cp -r gstack/ios-fix ~/.claude/skills/ios-fix

Safety box score

Grade F, high risk: 68 of 100 risk points, rated 2026-10-16. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

This skill automates an iOS bug fix loop: it reads app state, edits Swift, rebuilds, redeploys, and verifies on a real device. The main risks are broad autonomous device control, runtime instruction injection through helper output, and capture of live app state that may include personal data.

Category levels, from 0 (none) to 3 (high)
Category	Level	Why
Code & shell execution	3 (high)	It explicitly runs shell commands and native build steps, including `~/.claude/skills/gstack/bin/gstack-skill-start` and `xcodebuild ... build install`, so it can execute local code.
Network access	2 (moderate)	It moves live state through `GET /state/snapshot`, `GET /screenshot`, and `POST /state/restore`, plus telemetry, so device/app data can leave the process.
Filesystem reach	2 (moderate)	It writes regression fixtures under `test/fixtures/ios-fix/` and also touches home-dotdir paths like `~/.claude/skills/gstack/` and `.gstack/tmp/`.
Secrets & credentials	1 (low)	It does not directly request passwords or keys, but snapshot and screenshot capture on a real device can expose logged-in app content and other personal data.
Privilege & persistence	1 (low)	No sudo or global install is required, but it does alter local agent state and installs builds onto a connected iOS device.
Instruction hijack surface	3 (high)	It tells the agent to treat the skill file as executable instructions and to follow `GSTACK_INSTRUCTION_BEGIN` blocks from tool output, which is a runtime instruction-injection path.
Irreversible actions	3 (high)	The stated workflow is to `writes the fix, rebuilds, redeploys, and verifies the fix on the real device` with `zero human intervention`.
Transparency	2 (moderate)	Important behavior is delegated to helper scripts under `~/.claude/skills/gstack/bin/`, and those scripts are not included in the provided source.

Before installing

Read `~/.claude/skills/gstack/bin/gstack-skill-start` and `gstack-skill-end` before trusting the startup or telemetry behavior.
Run it once in a scratch app or simulator with no sensitive account signed in.
Confirm whether `GET /state/*` only talks to local device tooling and not an external host.
Check `test/fixtures/ios-fix/` policy so you are comfortable with screenshots and snapshots landing in the repo.

Rated 2026-10-16 by an automated review of 1 file from the skill's repository.

Source

Repository: garrytan/gstack (all skills from this repository)
Path: ios-fix/SKILL.md
Branch: main
Updated: 2026-10-05

eas-simulator — EAS service (paid). Run and control a user's app on a remote iOS/Android simulator hosted on EAS cloud.
qa — Fix browser/API/CLI/job/worker/webhook bugs. (gstack)
qa-only — Report browser/API/CLI/job/worker/webhook bugs. (gstack)
developing-ios-apps — Develops iOS/macOS apps with XcodeGen, SwiftUI, and SPM, including Apple Developer signing, notarization, and CI/CD pipelines.
surgical-patch — Fix bugs and small behavior changes at the narrowest responsible layer.
swiftui-expert-skill — Use when writing, reviewing, or refactoring SwiftUI code for iOS or macOS, including state and `@Observable` data flow, view composition, resizable layouts.