Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add BoSMark/BoS_OS_Start --skill agent-os-bootstrapgit clone --depth 1 https://github.com/BoSMark/BoS_OS_StartWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/bosmark/bos_os_start/agent-os-bootstrap)<a href="https://agentmods.dev/skills/bosmark/bos_os_start/agent-os-bootstrap"><img src="https://agentmods.dev/badge/skills/bosmark/bos_os_start/agent-os-bootstrap/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/bosmark/bos_os_start/agent-os-bootstrap"><img src="https://agentmods.dev/badge/skills/bosmark/bos_os_start/agent-os-bootstrap.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Excessive Agency · line 241 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00180 | $0.06151 |
| Opus 5.5 | $0.00072 | $0.02460 |
| Sonnet 5.5 | $0.00036 | $0.01230 |
| Haiku 4.5 | $0.00018 | $0.00615 |
Grade A, and why
agent-os-bootstrap scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
**Check reference files before reading them.** Some installs, including Cowork uploads, keep only this SKILL.md. Before the first reference-file read, check each file listed below is present and non-empty. Also check any How it starts
The opening of the file, as written. The whole thing — 375 lines — stays where its author put it; the contents beside it link to each section on GitHub.
BoS OS: Company Bootstrap
You are building the BoS OS for a company. Your goal is to help the CEO or founder, who is typically the first user of the BoS OS, make better decisions and keep the activities of the business focused on the right things.
Your job is to research the company from public information and create a complete, populated folder structure that the founder and their team can immediately start working with. Think of it as writing down the operating system that already exists in the founder's head, and giving AI a governed place inside it.
Before You Begin
Check reference files before reading them. Some installs, including Cowork uploads, keep only this SKILL.md. Before the first reference-file read, check each file listed below is present and non-empty. Also check any other reference file before using it. Keep the files already installed. Download only missing or empty files with curl --fail --location --silent --show-error from the base address below, followed by the exact relative path. The address is pinned to this skill's release. Use these paths directly; no GitHub API request or directory listing is needed.
Base address: https://raw.githubusercontent.com/BoSMark/BoS_OS_Start/v2.5.3/agent-os-bootstrap/references/
agent_spec_template.mdbootstrap_summary_template.mdmemory_protocol_template.mdclaude_md_template.mdfolder_structure.mdindustry_patterns.mdsession_summary_template.mdstrategy_templates/brand_template.mdstrategy_templates/competitive_template.mdstrategy_templates/financial_template.mdstrategy_templates/governance_template.mdstrategy_templates/growth_template.mdstrategy_templates/measurement_template.mdstrategy_templates/platform_template.mdstrategy_templates/product_template.mdstrategy_templates/security_template.mdstrategy_templates/values_template.mdstrategy_templates/README.md
Save downloads in a writable working folder, preserving the paths under references/. Do not assume the installed skill folder is writable. Use the installed file when it is present and non-empty, and the downloaded copy otherwise. Download to a temporary file, require a successful HTTP response and non-empty content, then move it to its destination. Read each required file in full before using it. Do not use a tool that summarises pages. Do not rebuild a file from memory. If a download fails or is empty, stop before generating documents. Tell the user the exact missing path and the failure, and ask them to restore access or provide that release's file. Do not continue with a substitute template.
What ships with it
19 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- references/agent_spec_template.md 30 KB
- references/bootstrap_summary_template.md 1.1 KB
- references/claude_md_template.md 26 KB
- references/folder_structure.md 16 KB
- references/industry_patterns.md 27 KB
- references/memory_protocol_template.md 1.2 KB
- references/README.md 2.4 KB
- references/session_summary_template.md 1.0 KB
- references/strategy_templates/brand_template.md 3.1 KB
- references/strategy_templates/competitive_template.md 6.4 KB
- references/strategy_templates/financial_template.md 3.5 KB
- references/strategy_templates/governance_template.md 4.7 KB
- references/strategy_templates/growth_template.md 3.5 KB
- references/strategy_templates/measurement_template.md 4.8 KB
- references/strategy_templates/platform_template.md 6.6 KB
- references/strategy_templates/product_template.md 3.6 KB
- references/strategy_templates/README.md 1.9 KB
- references/strategy_templates/security_template.md 5.6 KB
- references/strategy_templates/values_template.md 2.8 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed · +42 lines 96978c9c0c8e
- 3d ago Changed · +17 lines 29d52509e98a
- 1mo ago First seen · 316 lines · 180 tokens per session scan A 40fb3c5c64ca
agent-os-bootstrap is a skill published in the GitHub repository BoSMark/BoS_OS_Start (25 stars, last pushed yesterday), licensed MIT. It adds 180 tokens to every session and 6,151 once invoked, about $0.0007 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
forbotsake
Marketing skills for Claude Code. From zero marketing knowledge to published content. Run /forbotsake to set up all marketing skills, check installation health, or get routed to the right skill. Use when: "forbotsake", "install forbotsake", "marketing skills", "how should I market this", "help me sell this".
tweakidea
Use when a founder wants to evaluate a startup idea or problem, improve or compare idea evaluations, or mine Hacker News for product opportunities. Runs a 14-dimension weighted scorecard with assumption tracking, generates small/medium/big idea tweaks, diffs runs, browses and analyzes HN threads, and lists, opens, or…
define-done
Generate a branded HTML accountability tracker for the next N days using the "Define Done" ritual. Takes 3 outcomes per day max (binary, shippable, no fluff), applies Walid's prompting principles for Claude Code, and outputs a self-contained HTML file ready to pin in a browser tab. Use when the user says "define…
forbotsake-cron
Autopilot mode for forbotsake. Installs a cron job that auto-posts reviewed content on schedule using Claude Code + Chrome. Content-calendar.md drives the timing. Subcommands: install, status, uninstall, pause, resume, doctor, run-now. Use when: "auto-post", "schedule posts", "autopilot", "cron", "forbotsake-cron"…
prd-os
PRD creation and PRD execution operating system. Use when the founder asks to turn a rough idea into a PRD, run a Codex review on a PRD or issue, decompose an approved PRD into issue specs, or execute an issue with scope enforcement and receipt-based closeout. Not for general product ideation or casual drafting; this…
reddit-writing-style
Use when analyzing a corpus of a user's Reddit posts to extract their writing voice, tone, structural patterns, and vocabulary into a reusable style guide. Invoked during /reddit-setup and re-invokable standalone if the user wants to refresh their style file after writing more posts.