canary

94 / 100 · Low risk

Fine to try. Some of what it can do is expected: a devops skill usually runs commands, installs tools and uses cloud credentials.

By garrytan/gstack (GitHub) · devops · 141,312 stars · scanned at commit bc858ff

Post-deploy canary monitoring. (gstack)

Works with any agent that supports SKILL.md skills.

What this skill can do

Runs commands on your computer

This is disclosed by the author in the skill's SKILL.md or README. Expected for a devops skill.

Found in 12 places.

canary/SKILL.md, line 27~/.claude/skills/gstack/bin/gstack-skill-start --skill "canary" --model "claude"
canary/SKILL.md, line 63~/.claude/skills/gstack/bin/gstack-question-log '{"skill":"canary","question_id":"<id>","question_summary":"<summary-slug>","category":"<approval|clarification|
canary/SKILL.md, line 72~/.claude/skills/gstack/bin/gstack-question-preference --write '{"question_id":"<id>","preference":"<pref>","source":"inline-user"}'

Show 9 more

canary/SKILL.md, line 88~/.claude/skills/gstack/bin/gstack-skill-end --skill "canary" --outcome OUTCOME \
canary/SKILL.md, line 103_gs_d() { if command -v gtimeout >/dev/null; then gtimeout 30 "$@"; elif command -v timeout >/dev/null; then timeout 30 "$@"
canary/SKILL.md, line 147_ROOT=$(git rev-parse --show-toplevel 2>/dev/null)
canary/SKILL.md, line 191git remote get-url origin 2>/dev/null
canary/SKILL.md, line 246SLUG=$(~/.claude/skills/gstack/bin/gstack-slug --get SLUG 2>/dev/null) || SLUG=unknown
canary/SKILL.md, line 261aside repl '
canary/SKILL.md, line 308aside repl '
canary/SKILL.md, line 341aside repl '
canary/SKILL.md, line 421GSTACK_STATE_ROOT=$(~/.claude/skills/gstack/bin/gstack-paths --get GSTACK_STATE_ROOT); : "${GSTACK_STATE_ROOT:?gstack-paths failed; reinstall with ./setup or /g

Connects to the internet

This is disclosed by the author in the skill's SKILL.md or README. Expected for a devops skill.

Found in 2 places.

canary/SKILL.md, line 311for (const l of links) { const r = await fetch(l, { method: "HEAD" }).catch(e => ({ status: "ERR " + e.message })); console.log("LINK", r.status, l); }
canary/SKILL.md.tmpl, line 117for (const l of links) { const r = await fetch(l, { method: "HEAD" }).catch(e => ({ status: "ERR " + e.message })); console.log("LINK", r.status, l); }

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'canary' ] || [ -L ~/.agents/skills/'canary' ]; then echo 'A skill folder named canary already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/garrytan/gstack' "$d" && git -C "$d" checkout --quiet 'bc858ffc659bcc61558f60d0e023a009817dd48f' -- 'canary' && mkdir -p ~/.agents/skills && cp -R "$d"/'canary' ~/.agents/skills/'canary' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'canary' ~/.claude/skills/'canary' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for garrytan/gstack shows the score of its lowest-scoring skill.

SkillTrust badge for garrytan/gstack

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/garrytan/gstack.svg)](https://zalavijaysinh.github.io/skilltrust/repos/garrytan/gstack/)

Score history

Date	Version	Score
2026-11-12	`bc858ff`	94
2026-11-11	`f0cd9f8`	94
2026-11-10	`6b32714`	94
2026-11-09	`c25580e`	94
2026-11-08	`9740bfd`	94
2026-11-08	`d479c5b`	94
2026-11-06	`0c41ced`	84