Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/lmanchu/iris-system/gstacknpx skills add lmanchu/iris-system --skill gstackgit clone --depth 1 https://github.com/lmanchu/iris-systemWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00095 | $0.02154 |
| Opus 5 | $0.00048 | $0.01077 |
| Sonnet 5 | $0.00019 | $0.00431 |
| Haiku 4.5 | $0.00010 | $0.00215 |
Grade C, and why
gstack scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
3. If `bun` is not installed, tell the user to install it: `curl -fsSL https://bun.sh/install | bash` Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
3. If `bun` is not installed, tell the user to install it: `curl -fsSL https://bun.sh/install | bash` Copies of this mod
1 near-identical copy found in the catalogue:
- browse — 95% identical, 2 lines differ
How it starts
The opening of the file, as written. The whole thing — 255 lines — stays where its author put it; the contents beside it link to each section on GitHub.
gstack: Persistent Browser for Claude Code
Persistent headless Chromium daemon. First call auto-starts the server (~3s). Every subsequent call: ~100-200ms. Auto-shuts down after 30 min idle.
SETUP (run this check BEFORE any browse command)
Before using any browse command, find the skill and check if the binary exists:
# Check project-level first, then user-level
if test -x .claude/skills/gstack/browse/dist/browse; then
echo "READY_PROJECT"
elif test -x ~/.claude/skills/gstack/browse/dist/browse; then
echo "READY_USER"
else
echo "NEEDS_SETUP"
fi
Set B to whichever path is READY and use it for all commands. Prefer project-level if both exist.
If NEEDS_SETUP:
- Tell the user: "gstack browse needs a one-time build (~10 seconds). OK to proceed?" Then STOP and wait for their response.
- If they approve, determine the skill directory (project-level
.claude/skills/gstackor user-level~/.claude/skills/gstack) and run:
cd <SKILL_DIR> && ./setup
- If
bunis not installed, tell the user to install it:curl -fsSL https://bun.sh/install | bash - Verify the
.gitignorein the skill directory containsbrowse/dist/andnode_modules/. If either line is missing, add it.
Once setup is done, it never needs to run again (the compiled binary persists).
IMPORTANT
- Use the compiled binary via Bash:
.claude/skills/gstack/browse/dist/browse(project) or~/.claude/skills/gstack/browse/dist/browse(user). - NEVER use
mcp__claude-in-chrome__*tools. They are slow and unreliable. - The browser persists between calls — cookies, tabs, and state carry over.
- The server auto-starts on first command. No setup needed.
Quick Reference
B=~/.claude/skills/gstack/browse/dist/browse
# Navigate to a page
$B goto https://example.com
# Read cleaned page text
$B text
# Take a screenshot (then Read the image)
$B screenshot /tmp/page.png
# Snapshot: accessibility tree with refs
$B snapshot -i
# Click by ref (after snapshot)
$B click @e3
# Fill by ref
$B fill @e4 "[email protected]"
# Run JavaScript
$B js "document.title"
# Get all links
$B links
# Click by CSS selector
$B click "button.submit"
# Fill a form by CSS selector
$B fill "#email" "[email protected]"
$B fill "#password" "abc123"
$B click "button[type=submit]"
# Get HTML of an element
$B html "main"
# Get computed CSS
$B css "body" "font-family"
# Get element attributes
$B attrs "nav"
# Wait for element to appear
$B wait ".loaded"
# Accessibility tree
$B accessibility
# Set viewport
$B viewport 375x812
# Set cookies / headers
$B cookie "session=abc123"
$B header "Authorization:Bearer token123"
What ships with it
33 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- .gitignore 60 B
- browse/SKILL.md 8.4 KB
- browse/src/browser-manager.ts 8.0 KB runs code
- browse/src/buffers.ts 1.0 KB runs code
- browse/src/cli.ts 7.9 KB runs code
- browse/src/meta-commands.ts 7.1 KB runs code
- browse/src/read-commands.ts 7.6 KB runs code
- browse/src/server.ts 9.2 KB runs code
- browse/src/snapshot.ts 6.2 KB runs code
- browse/src/write-commands.ts 5.9 KB runs code
- browse/test/commands.test.ts 20 KB runs code
- browse/test/fixtures/basic.html 914 B
- browse/test/fixtures/forms.html 1.8 KB
- browse/test/fixtures/responsive.html 1.4 KB
- browse/test/fixtures/snapshot.html 1.5 KB
- browse/test/fixtures/spa.html 638 B
- browse/test/snapshot.test.ts 8.7 KB runs code
- browse/test/test-server.ts 1.4 KB runs code
- BROWSER.md 11 KB
- CHANGELOG.md 1.3 KB
- CLAUDE.md 1.4 KB
- LICENSE 1.0 KB
- package.json 792 B
- plan-ceo-review/SKILL.md 33 KB
- plan-eng-review/SKILL.md 12 KB
- README.md 19 KB
- retro/SKILL.md 11 KB
- review/checklist.md 6.7 KB
- review/SKILL.md 2.7 KB
- setup 1.8 KB
- ship/SKILL.md 12 KB
- TODO.md 4.1 KB
- VERSION 6 B
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 255 lines · 95 tokens per session scan C 4e5e38f2eed8
gstack is a skill published in the GitHub repository lmanchu/iris-system (5 stars, last pushed 2mo ago), licensed MIT. It adds 95 tokens to every session and 2,154 once invoked, about $0.0005 per session on Opus 5. A static security scan graded it C with 2 findings (downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
code-review
Review code changes, pull requests, branches, commits, and diffs in the Terragrunt MCP Server. Use when asked for a code review, PR review, regression analysis, risk assessment, review comments, or merge-readiness check.
super-claudio:discover-skills
Claude Code skill and plugin discovery fallback. Use when the user wants to find new Claude Code skills, plugins, or extensions — not general AI SaaS tools. Trigger on: "find a skill for X", "is there a skill that can do X", "find me a plugin", "search for a skill", "I need a skill for X", "find Claude skills"…
wendao
Internal guardian skill for creating and editing Wendao DocOS documentation.
research
Autonomous documentation research using docsearch CLI - inspired by karpathy/autoresearch.
bug-fix
Minimal, surgical fix for a reported defect with focused validation.
super-claudio:find-ai-tools
AI tool discovery skill. Use when the user wants to find, compare, or evaluate AI-powered web tools — especially when they care about whether a tool has a genuinely free tier without requiring a credit card. Trigger on: "find AI tools for X", "best free AI tools for X", "list the best video creation tools", "find free…