gstack turns Claude Code into a 23-role engineering team — free, MIT, 122K+ stars. We run a real store on Claude Code. Here's what gstack covers brilliantly, and the layer it deliberately skips.
gstack — github.com/garrytan/gstack — is the most-starred Claude Code configuration on GitHub: 122,000+ stars since March 2026, MIT-licensed, actively maintained by Garry Tan, President and CEO of Y Combinator. The short verdict first: it is excellent at what it targets, and what it targets is the engineering workflow — planning, review, QA, release. What it deliberately does not touch is the business layer: growth, distribution, revenue automation, and the commerce-specific failure modes that cost real money. We operate a 4,000-product store end-to-end on Claude Code, so this is a field report from an operator — including where gstack is simply better than what we had, and where it stops.
What gstack is
gstack turns Claude Code into a virtual engineering team through 23 role definitions and a set of slash-command skills. The roles map to a startup org chart: a CEO who challenges the product plan (/plan-ceo-review), an engineering manager who locks architecture (/plan-eng-review), a designer with an explicit mandate to catch AI-generated visual slop, a reviewer (/review), a QA lead that drives a real browser against your staging URL (/qa), a Chief Security Officer running OWASP and STRIDE audits (/cso), and a release engineer (/ship, /canary). Everything is Markdown, everything installs in about thirty seconds, everything is free.
Tan's framing is the Karpathy line from the No Priors podcast — barely typing code anymore — and his own claimed numbers: three production services and forty-plus features shipped in sixty days, part-time, while running YC. Discount founder-math however you like; the repo's activity log is public and the cadence is real.
Where gstack genuinely shines
Three things stood out when we evaluated it against our own production setup.
The adversarial planning gauntlet. Running a feature idea through a CEO review, an engineering review, and a design review as separate opinionated passes catches a class of problem that a single planning prompt misses. This mirrors what we learned independently: our highest-leverage agent is an adversarial verifier whose only job is to break changes before they ship. Different implementations, same insight — separation of roles beats self-review.
QA that opens a real browser. /qa drives an actual browser session against staging. Most Claude Code setups — including many paid ones — verify by reading code. Reading code is not verification; we learned that the expensive way when a page returned HTTP 200 while streaming a 404 body, invisible to every monitor we had.
Change-control modes. /careful, /freeze, and /guard put explicit friction around risky changes. This is the same philosophy as our trust-boundary rule, which blocks any commit touching payment or auth code until a written security checklist is acknowledged. gstack generalizes the idea into a mode you can enter and leave.
Comments · 0
Beta: comments are stored locally on your device and not visible to other readers.
No comments yet. Be the first to share your thoughts.