gstack

garrytan/gstackReviewed by AI

What it does

gstack is a bundle of dozens of slash commands for Claude Code and other AI coding agents. Each command plays a role, such as product reviewer, engineer, designer, tester, security officer or release manager, and it includes its own browser the agent can drive to test web pages. It is for programmers and technical founders who already use an AI coding agent. You need Claude Code (or another supported agent), Git, Bun and, on Windows, Node.js; on Windows it runs through Git Bash or WSL. The code is free, but the AI agent it drives usually needs a paid plan.

How easy it is to install

D · terminal, several tools or a specific graphics card · Windows

Windows D
macOS D
Linux D

D everywhere: there are no program files in the releases, so on each system you install Claude Code, Git and Bun, clone the repository and run `./setup`, which builds its own Chromium browser. Windows is the hardest of the three: it needs Node.js as well, runs through Git Bash or WSL, and the README says Smart App Control blocks the programs setup compiles on your machine.

Coming soon: install in 1 click with the RepoPicks app.

Numbers on GitHub

Stars: 138,481on Oct 31, 2026
Downloads: —all releases
Growth: +648stars in 5 days

Stars over time

Facts

Runs on: Windows, macOS, Linux
You need to install: Node.js, FFmpeg, Other tools
To build from source: Node.js, FFmpeg
Disk space: 150 MB–650 MB · estimate
Accounts or keys: Anthropic (only for the project's own test evals)
Cost: Free, API costs extra · MIT licensed, and the README says there is no premium tier. It runs inside Claude Code or another AI coding agent, which usually needs a paid subscription or API usage; a few skills also spend money of their own (paid evals, outside reviews, Ubicloud VMs).
License: MIT (Permissive)
Can replace: CodeRabbit
Last update: Nov 1, 2026

Risk signals (8)

Attentionunusual star rate
138331 stars in 233 days (~594 per day)
automatic check
Attentionauto update each session
README.md (team mode): "Every Claude Code session starts with a fast auto-update check (throttled to once/hour, network-failure-safe, completely silent)." New code is pulled from GitHub without a prompt.
AI review
Attentioncode sent to outside ai by default
README.md: "outside reviews (on by default; the first one prints a notice) send code to Codex or Claude Code under your own login and turn off with `gstack-config set codex_reviews disabled`."
AI review
Attentionbrowser cookie copy
README.md, /setup-browser-cookies: "Copy selected cookies from Chrome, Chromium, Brave, Edge, ... into gstack's bundled browser." Logged-in sessions become available to the AI agent.
AI review
Attentionpublic tunnel to browser
README.md, /pair-agent: "Auto-starts ngrok tunnel for remote agents." package.json lists the dependency "@ngrok/ngrok".
AI review
Attentionremote agents can reach your phone
README.md, /ios-qa: it drives "a real iPhone or iPad over USB CoreDevice", and "Optional `--tailnet` flag exposes the device to OpenClaw or any HTTP-capable agent on your Tailscale tailnet so remote agents can run iOS QA without ever touching the hardware."
AI review
Inforewrites agent instructions
README.md install prompt asks Claude to "add a \"gstack\" section to CLAUDE.md that says to use the /browse skill from gstack for all web browsing and never use mcp__claude-in-chrome__* tools"; setup also registers hooks.
AI review
Infounsigned local binaries
README.md: "gstack's compiled binaries (`browse`, `find-browse`, `design`, `pdf`, `gstack-global-discover`) are built on your machine and unsigned, so Windows 11 with Smart App Control on refuses to start them."
AI review

Evidence is shown in its original language.

What Radar could not check

Whether setup finishes cleanly on Windows 11 through Git Bash without turning off Smart App Control.
How much AI usage each command consumes on a paid Claude Code or Codex plan, and what the paid eval and Ubicloud steps cost.
Real disk use after setup downloads its own Chromium browser and optional models.
What the auto-update and telemetry checks actually send compared with the privacy page.
Whether the dozens of skills work as described, since the repository's own description counts 23 tools while the README table lists many more.