ios-sync

An agent skill by garrytan, from garrytan/gstack. Tags: integration, ios, setup.

What it does

Regenerate the iOS debug bridge against the latest upstream gstack templates. (gstack)

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add garrytan/gstack --skill ios-sync

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/garrytan/gstack
cp -r gstack/ios-sync ~/.claude/skills/ios-sync

Safety box score

Grade C, moderate risk: 39 of 100 risk points, rated 2026-10-20. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

This skill regenerates an iOS debug bridge in place and then builds/verifies the app. The main risks are local code rewrites and deletions inside the repo, plus writes into user dot-directories and runtime instructions from tool output that can change how the agent behaves.

Category levels, from 0 (none) to 3 (high)
Category	Level	Why
Code & shell execution	2 (moderate)	It runs several shell/native commands, including `~/.claude/skills/gstack/bin/gstack-skill-start`, `gstack-ios-qa-regen`, `swift build`, and `xcodebuild`.
Network access	1 (low)	It sends a `GET /state/snapshot` request for validation and may emit telemetry metadata; there is no generic internet download path in the skill text.
Filesystem reach	2 (moderate)	It rewrites `DebugBridge/` artifacts, removes obsolete generated files, and writes under `~/.claude/skills/gstack/`, `~/.gstack/`, and `$GSTACK_STATE_ROOT/analytics/`.
Secrets & credentials	0 (none)	The skill does not read credential stores, browser sessions, keychains, or ask for pasted secrets; `SESSION_ID` and `TEL_START` are telemetry IDs, not secrets.
Privilege & persistence	0 (none)	There is no sudo, global install, service registration, shell startup editing, or OS-level configuration change.
Instruction hijack surface	2 (moderate)	It tells the agent to treat the skill file as executable instructions, honor `GSTACK_INSTRUCTION_BEGIN` blocks from tool output, and auto-choose recommendations in `spawned`/`unattended` sessions.
Irreversible actions	1 (low)	Its purpose is to regenerate code in place and delete obsolete generated files, but it does not push, publish, pay, book, or otherwise act outside the local workspace.
Transparency	2 (moderate)	Behavior depends on local executables under `~/.claude/skills/gstack/bin` and upstream templates, but their implementations are not visible in the reviewed file.

Before installing

Read the helper scripts it calls, especially `~/.claude/skills/gstack/bin/gstack-ios-qa-regen`, before trusting the file mutations.
Run it once on a scratch branch and inspect `git diff`; it will rewrite `DebugBridge/` and may delete stale generated files.
Confirm the app source path is correct before running it; the regen scope is driven by `--app-source` and `--bridge-dir`.
Verify the snapshot check hits only the intended local daemon, since the workflow ends with `GET /state/snapshot`.

Rated 2026-10-20 by an automated review of 1 file from the skill's repository.

Source

Repository: garrytan/gstack (all skills from this repository)
Path: ios-sync/SKILL.md
Branch: main
Updated: 2026-10-05

expo-brownfield — Framework (OSS). Integrate Expo and React Native into an existing native iOS or Android app.
caveman-setup — Wire a repository through the Caveman Cloud gateway so every LLM request is measured, with no behavior change.
marketplace-dev — Creates and maintains Claude Code plugin marketplaces, consolidates standalone skills into a new or existing suite, and moves skills between suites.
add-voice — Use when the user runs /add-voice, types Voice Mode, or asks to add Grok realtime voice to an app.
agents-build — Use to extend an existing agent project with memory, app integration, VPC, multi-agent, migration, model, browser, code interpreter, payments.
agents-connect — Use when connecting your agent to external APIs, tools, or services via Gateway, or restricting tool access with Cedar policies.