ios-clean
“Remove the DebugBridge SPM package and all #if DEBUG wiring from an iOS app. (gstack)”
aipkg.jsonLICENSE.txtREADME.mdSKILL.mdSKILL.md.tmpl- 01SDI-175%MEDIUM
SKILL.md:5
detailhide
The skill's manifest claims a narrow purpose (remove iOS DebugBridge) but the preamble executes extensive telemetry collection, configuration management, artifact syncing, and feature-discovery flows. This scope mismatch creates two risks: (1) users invoking /ios-clean to perform a focused cleanup are surprised by side effects (telemetry writes, config changes, artifact sync), and (2) the preamble's complexity obscures what actually runs, making auditing and consent difficult.
3preamble-tier: 34version: 1.0.05description: Remove the DebugBridge SPM package and all #if DEBUG wiring from an iOS app. (gstack)6allowed-tools:7 - Bashfix Separate concerns: move telemetry, feature discovery, and artifact-sync logic into a shared preamble hook that runs before ALL skills (not duplicated in each skill). The /ios-clean SKILL.md should contain only the inventory, removal, and verification phases. Document clearly in the skill description which preamble side effects will occur (e.g., 'This skill will write telemetry data to ~/.gstack/analytics/ unless telemetry is disabled').
- 02SDI-365%MEDIUM
SKILL.md:6
detailhide
The manifest declares allowed-tools as [Bash, Read, Edit, Glob, Grep, AskUserQuestion]—all local file operations. However, the preamble executes network operations (git fetch, gstack-brain-sync), spawns background subprocesses (gstack-timeline-log, gstack-telemetry-log), and writes to ~/.gstack/ directories outside the project. These operations are not declared in allowed-tools, creating a transparency gap: a user reading the manifest cannot predict the full scope of system impact.
4version: 1.0.05description: Remove the DebugBridge SPM package and all #if DEBUG wiring from an iOS app. (gstack)6allowed-tools:7 - Bash8 - Readfix Explicitly declare network and storage permissions in the skill manifest. Add an 'allowed-permissions' field listing: network (git fetch, GitHub/GitLab), subprocess (background logging), and local-storage (write to ~/.gstack/). Alternatively, move all undeclared operations into a gated preamble that requires explicit user opt-in or is managed centrally by the gstack framework (not per-skill).
- 03SDI-160%LOW
SKILL.md:814
detailhide
The skill claims reversibility via `git restore`, but the preamble writes to ~/.gstack/ (sessions, analytics, config state). These writes fall outside the project repository and are NOT reverted by `git restore`. If a user invokes /ios-clean and later wants to undo side effects (telemetry settings, feature-prompt markers, artifact-sync state), they cannot do so with the documented recovery method, leaving orphaned state in the user's home directory.
812## Reversibility813814Every Edit + delete is a git operation; the user can `git restore` to undo.815This skill never force-pushes, never amends, never deletes the SPM cache —816those are user choices.fix Document explicitly which side effects are reversible (git-tracked) and which are not (home directory state). For truly destructive operations (/ios-clean removes files from the app source), provide a pre-flight dry-run option (already planned in Phase 1). For home-directory state, either: (a) add a --cleanup flag that reverts ~/.gstack/ writes, or (b) document that users must manually edit ~/.gstack config files to revert onboarding/telemetry choices.
- 04SQP-280%HIGH
SKILL.md:789
detailhide
The skill description does not include prominent warnings about destructive file operations. Phase 2 and Phase 3 of the workflow delete StateAccessor.swift files and remove SPM dependencies without emphasizing the data loss risk. Users skimming the skill description may not realize they are about to irreversibly delete generated code and project structure, leading to accidental data loss if they misunderstand the scope.
787 AskUserQuestion: proceed, dry-run, or abort.788789## Phase 2: Remove790791For each item the user approved:fix Add a prominent WARNING section to the skill description (before 'What it removes'), stating: 'WARNING: This skill DELETES files from your project and MODIFIES Package.swift. These changes cannot be undone except via git. Do not run this skill if you are unsure about your git state.' Include a pre-flight checklist: (1) Commit all work, (2) Verify git status is clean, (3) Review the file list before approving deletion.