Instructions file CodexOpenCode
Instructions for OpenAdminOS/OpenAdminOS, covering agents.md — operating instructions, what this project is, how to work in this repo, read spec.md before writing any code and reference the mockups for visual decisions.
Instructions file
Instructions for OpenAdminOS/OpenAdminOS, covering claude.md — operating instructions, what this project is, how to work in this repo, read spec.md before writing any code and reference the mockups for visual decisions.
Agent
Create and validate a local OpenAdminOS agent from inside the desktop app.
Agent
Submit a local user-authored agent for public OpenAdminOS maintainer review.
Agent
Reviews Intune compliance by state, operating system, ownership, enrollment, and stale inventory signals.
Agent
Reviews Conditional Access policies for coverage, exclusions, report-only controls, overlaps, and common Zero Trust gaps.
Agent
Reviews app registrations for stale experiments, risky exposure, credentials, and cleanup candidates with evidence-backed recommendations.
Agent
Reviews Intune-managed device inactivity by sync age, compliance, OS, ownership, and enrollment signals with review-first cleanup guidance.
Agent
Runs a read-only MXC-sandboxed audit of Intune managed-device posture, stale sync, compliance, ownership, enrollment, and duplicate-name signals.
Agent
Builds a conservative stale-device offboarding plan from Intune sync, Entra sign-in, ownership, compliance, and trust signals, then retires devices after typed confirmation.
Agent
Reviews Intune OS version distribution, compliance, ownership, enrollment, and stale inventory signals so admins can prioritize update work.
Agent
Classifies recent Entra risky users by risk level, state, detail, and processing status with conservative next-step guidance.
Agent
Prioritizes Microsoft Secure Score control profiles by category, action type, effort signals, user impact, and max-score upside.
Agent
Clusters recent failed sign-ins by error, app, user, client app, Conditional Access status, and location signals.
Agent
Builds a capped disable plan for enabled guest accounts with stale sign-in activity, external-state context, and per-guest rationale.
Agent
Reviews recent directory audit entries by activity, category, result, actor, and target context to flag changes worth checking.
Agent
Summarizes Intune tenant health from compliance, OS, ownership, and stale inventory signals for scheduled or manual review.