gstack
Enables fast web browsing for Claude Code with a headless Chromium daemon, allowing navigation, content extraction, and interaction with web pages.
Install this skill
Security score
The gstack skill was audited on Mar 17, 2026 and we found 21 security issues across 4 threat categories, including 1 critical. Review the findings below before installing.
Categories Tested
Security Issues
Piping content to bash shell
| 98 | 3. If `bun` is not installed: `curl -fsSL https://bun.sh/install | bash` |
Curl to non-GitHub URL
| 98 | 3. If `bun` is not installed: `curl -fsSL https://bun.sh/install | bash` |
Access to hidden dotfiles in home directory
| 22 | _UPD=$(~/.claude/skills/gstack/bin/gstack-update-check 2>/dev/null || .claude/skills/gstack/bin/gstack-update-check 2>/dev/null || true) |
Access to hidden dotfiles in home directory
| 24 | mkdir -p ~/.gstack/sessions |
Access to hidden dotfiles in home directory
| 25 | touch ~/.gstack/sessions/"$PPID" |
Access to hidden dotfiles in home directory
| 26 | _SESSIONS=$(find ~/.gstack/sessions -mmin -120 -type f 2>/dev/null | wc -l | tr -d ' ') |
Access to hidden dotfiles in home directory
| 27 | find ~/.gstack/sessions -mmin +120 -type f -delete 2>/dev/null || true |
Access to hidden dotfiles in home directory
| 28 | _CONTRIB=$(~/.claude/skills/gstack/bin/gstack-config get gstack_contributor 2>/dev/null || true) |
Access to hidden dotfiles in home directory
| 31 | If output shows `UPGRADE_AVAILABLE <old> <new>`: read `~/.claude/skills/gstack/gstack-upgrade/SKILL.md` and follow the "Inline upgrade flow" (auto-upgrade if configured, otherwise AskUserQuestion with |
Access to hidden dotfiles in home directory
| 52 | **To file:** write `~/.gstack/contributor-logs/{slug}.md` with this structure: |
Access to hidden dotfiles in home directory
| 72 | Then run: `mkdir -p ~/.gstack/contributor-logs && open ~/.gstack/contributor-logs/{slug}.md` |
Access to hidden dotfiles in home directory
| 87 | [ -z "$B" ] && B=~/.claude/skills/gstack/browse/dist/browse |
External URL reference
| 98 | 3. If `bun` is not installed: `curl -fsSL https://bun.sh/install | bash` |
External URL reference
| 113 | $B goto https://app.example.com/login |
External URL reference
| 132 | $B goto https://yourapp.com |
External URL reference
| 145 | $B goto https://app.example.com/new-feature |
External URL reference
| 171 | $B goto https://yourapp.com |
External URL reference
| 195 | $B goto https://app.example.com/upload |
External URL reference
| 205 | $B goto https://app.example.com/form |
External URL reference
| 251 | $B diff https://staging.app.com https://prod.app.com |
External URL reference
| 258 | ["goto","https://app.example.com"], |