onboard — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited onboard (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Single combined wizard. Reads or writes aios-intake.md (the canonical intake), conducts the 7-question interview if the file isn't filled, then scaffolds the Day-1 file set inline at the end of the run. No separate /scaffold-from-intake skill — this is one flow.
The wow moment: at the end, suggest the closing prompt "Try this — ask me: what should I focus on this week?" The user runs it once. That's the wow. There's no /today skill to save — the prompt itself plants the Mindset framework (Default Shift) for them to internalize.
connections.md to edit directly, or schedule a /level-up Phase 2 walk.Read aios-intake.md. Check which Q1-Q7 sections have content vs. [Your answer here] placeholders.
Ask one at a time. Write each answer into aios-intake.md as you go (so the user can resume if interrupted).
Q1 — Who are you, what do you sell, who do you sell it to? Identity, offer, ICP. One paragraph each is fine.
Q2 — Paste 1-2 things you've written recently. Don't edit them. This is the only question with a hard rule. Voice samples MUST be pasted, not typed mid-conversation. If the user starts typing fresh prose, refuse:
"Stop — paste it raw. If you type it here while we're talking, the sample is already shaped by our conversation. Open your last email or LinkedIn post in another tab and paste the unedited text. This is the one rule I can't bend."
Ask for two samples. One email, one post. Or two of either.
Q3 — What are your 2-3 biggest priorities for the next 90 days? Quarterly priorities. Push back if they say "grow my business" — make them name a number, a deadline, or a deliverable.
Q4 — Where does revenue actually land, and where is it tracked? Multiple answers OK. Map to Tier-1 Domain 1 (Revenue/Financials).
Q5 — Where do you talk to customers, your team, and the outside world day-to-day? Email (Gmail/Outlook), Slack/Teams/Discord, DMs. Map to Domains 2 + 4.
Q6 — Where do meeting recordings, notes, and important docs live? Map to Domains 6 + 7.
Q7 — What's the one task that eats your week, and where do you currently track work? Capture top_pain (used by /level-up Day-14) + Domain 5 (tasks).
Domain 3 (Calendar) is auto-inferred from Q5: Gmail → Google Cal; Outlook → Outlook Cal. Confirm in Step 3.
Once the intake is complete, generate these files (or update if re-running). Back up originals to archives/intake-{YYYY-MM-DD-HHMM}/ if any exist.
mechanism: not yet connected, auth: —, last checked: —. The user wires connections on Day 2.{{...}} placeholders. Substitute the user's name, stated priority, voice register summary, and a brief connections summary.Print one screen. Three lines max:
✓ Day 1 done. Your AIOS knows who you are, what you sell, what matters this quarter, and how you sound.
Today: ask me — "what should I focus on this week?"
Tomorrow: pick one tool from connections.md and wire it up (manual MCP install or write a small API script + save references/{tool}-api.md). Optional: `python tools/graphify_setup.py install` adds the knowledge graph (/graph).
Day 7: run /audit to see your score.When the user runs the closing prompt ("what should I focus on this week?"), respond using only the new context files. Hit:
The Default Shift question seeds the Mindset framework before /level-up formally introduces it on Day 14.
aios-intake.md and re-running.archives/intake-{ts}/. Skips questions already answered unless the user wants to revise./structure, /triage, /daily, /weekly, /wiki, /graph, /draft, /prep, /decide, /workflow, /experiment, …); new ones are authored deliberately via /level-up + references/sops/authoring-skills.md./onboard, fill 7 answers, scaffold runs, ask the wow prompt, response cites Q1 + Q3 + Q7 specifically. Generic = fail./onboard with one Q3 priority changed. Expected: only context/priorities.md and CLAUDE.md's priority section update; backup created in archives/intake-{ts}/.Inspired by Nate Herk's "The Three Ms of AI" framework. The Mindset language in the closing screen lives in `references/3ms-framework.md`.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.