Update to gstack Workflows

{
  "name": "setup-browser-cookies",
  "description": "Import browser cookies into native gstack only with explicit user authorization on a compatible local host.",
  "included_files": [
    {
      "relative_path": "agents/openai.yaml",
      "size_in_bytes": 303
    }
  ],
  "skill_md_contents": "---\nname: setup-browser-cookies\ndescription: Import browser cookies into native gstack only with explicit user authorization on a compatible local host.\n---\n\n# Setup Browser Cookies\n\nPortable ChatGPT/Codex adaptation of the `setup-browser-cookies` workflow from `garrytan/gstack`. Preserve the original job and safety intent while mapping execution to capabilities the current host actually exposes.\n\n## When to use\n\nUse this Skill when the user explicitly names `setup-browser-cookies` or asks for the same job described above.\n\n## Host contract\n\n- Inspect repository or file evidence before making claims about the current state.\n- Use host-native read, list, search, grep, patch, write, shell, browser, computer, and Python capabilities only when they actually exist.\n- Never claim commands, tests, browser actions, device actions, file writes, Git operations, or external mutations that were not executed.\n- Prefer read-only discovery before mutation.\n- Respect repository instructions and preserve unrelated work.\n- When the original native gstack runtime is available in Codex, it may be used as an implementation detail after inspecting the installed upstream Skill. Do not hard-code Claude-only paths as a requirement.\n\n## Workflow\n\n1. Require a compatible local gstack browser runtime.\n2. Treat cookies, authenticated tabs, tokens, pairing keys, and account sessions as sensitive.\n3. Ask for explicit authorization before importing credentials, pairing agents, or changing grants.\n4. Apply least privilege, scope limits, and revocation checks.\n5. Do not print secrets or persist them in plugin files.\n\n## Completion\n\nReturn the decision, findings, changed artifacts if any, executed verification, skipped checks, and remaining blockers.\n\n## Surface note\n\nThis workflow is published for Codex discovery because its full behavior depends on a local runtime, device, browser session, or credential-aware command environment. ChatGPT can still discuss the workflow, but must not claim native execution.\n"
}