start-aicoo — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited start-aicoo (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
One command to verify your agent identity, check workspace health, and push any new context.
AICOO_API_KEY environment variable must be sethttps://www.aicoo.io/api/v1curl -s "https://www.aicoo.io/api/v1/identity" \
-H "Authorization: Bearer $AICOO_API_KEY" | jq .Expected response includes profile.userId, profile.username, profile.name. If this fails, the API key is invalid or expired — guide user to https://www.aicoo.io/settings/api-keys.
curl -s "https://www.aicoo.io/api/v1/os/status" \
-H "Authorization: Bearer $AICOO_API_KEY" | jq .Report: note count, folder count, last sync time, active share links.
curl -s -X POST "https://www.aicoo.io/api/v1/os/notes/search" \
-H "Authorization: Bearer $AICOO_API_KEY" \
-H "Content-Type: application/json" \
-d '{"query":"COO.md USER.md POLICY.md"}' | jq .If any of memory/self/COO.md, memory/self/USER.md, or memory/self/POLICY.md are missing, prompt the user to create them or offer to generate defaults.
Scan the current project directory for recently modified files:
# Find markdown/text files changed in the last 24 hours
find . -maxdepth 3 \( -name "*.md" -o -name "*.txt" \) \
-not -path "*/node_modules/*" \
-not -path "*/.git/*" \
-not -path "*/.next/*" \
-newer /tmp/.aicoo-last-sync 2>/dev/null | head -30If no /tmp/.aicoo-last-sync marker exists, this is a first sync — list all candidate files and ask the user which ones to include.
For each file to sync, search for existing notes:
curl -s -X POST "https://www.aicoo.io/api/v1/os/notes/search" \
-H "Authorization: Bearer $AICOO_API_KEY" \
-H "Content-Type: application/json" \
-d '{"query":"[file title or topic]"}' | jq .curl -s -X POST "https://www.aicoo.io/api/v1/accumulate" \
-H "Authorization: Bearer $AICOO_API_KEY" \
-H "Content-Type: application/json" \
-d '{
"files": [
{"path": "Folder/filename.md", "content": "..."}
]
}' | jq .touch /tmp/.aicoo-last-syncPrint a concise status:
Aicoo Agent Status
Identity: @username (Name)
Workspace: X notes, Y folders
Last sync: YYYY-MM-DD HH:MM
This sync: N files synced (M new, K updated)
Identity files: COO.md ✓ USER.md ✓ POLICY.md ✓
Share links: Z active| Error | Action |
|---|---|
401 from /identity | API key invalid — guide to settings page |
Identity OK but /os/status fails | Workspace not initialized — run POST /init |
| Missing identity files | Offer to create defaults from user context |
| No local changes found | Report "Agent context is up to date" |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.