Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add BoSMark/BoS_OS_Start --skill agent-os-rungit clone --depth 1 https://github.com/BoSMark/BoS_OS_StartWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/bosmark/bos_os_start/agent-os-run)<a href="https://agentmods.dev/skills/bosmark/bos_os_start/agent-os-run"><img src="https://agentmods.dev/badge/skills/bosmark/bos_os_start/agent-os-run/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/bosmark/bos_os_start/agent-os-run"><img src="https://agentmods.dev/badge/skills/bosmark/bos_os_start/agent-os-run.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 11 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium Excessive Agency · line 145 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
- medium Excessive Agency · line 394 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
- medium Excessive Agency · line 492 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
- medium Excessive Agency · line 578 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
- medium Excessive Agency · line 752 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
- medium Excessive Agency · line 465 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
- medium Excessive Agency · line 523 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
- medium Excessive Agency · line 688 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
- medium Excessive Agency · line 707 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
- medium Excessive Agency · line 713 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
- medium Excessive Agency · line 731 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00219 | $0.12646 |
| Opus 5.5 | $0.00088 | $0.05058 |
| Sonnet 5.5 | $0.00044 | $0.02529 |
| Haiku 4.5 | $0.00022 | $0.01265 |
Grade A, and why
agent-os-run scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
**Document and message gates.** Built systems pass the Verify and Validate checks above. A document or message the team will send or rely on first passes the matching checklist in `01_STATE/quality_gates.md`. If the file How it starts
The opening of the file, as written. The whole thing — 854 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Agent OS — Run
Version: 2.5.3
Status: ACTIVE
Author: Tim Barker, Mark Littlewood and Business of Software
The coordination layer for operating your BoS OS day to day.
Use this after you've run Bootstrap and Workshop. You have a strategy layer and refined agent roles. This is how you put them to work.
Source of frameworks, when they help: Business of Software's talk library at https://businessofsoftware.org/talks/ has 400+ talks, case studies, and frameworks from founders who've faced the same shaping, staffing, and delivery problems this pipeline works through. None of the three agents below should lead with a framework or use one to answer a question the human hasn't wrestled with yet — that undercuts the coaching model this whole layer is built on. But where a person is stuck, or names a problem that maps to a known pattern, a relevant talk or speaker is a legitimate tool to offer. Each agent's section below notes where that fits.
Operating rules for this skill
Follow these rules alongside the company's CLAUDE.md. On an older company folder, offer missing sections for approval before adding them; do not rewrite existing instructions, state, memory formats or thresholds. If the founder declines, continue within current rules and report the limitation.
Context and continuity
At session start, read the project instructions and current session summary, then the handoffs, review items, mission files and memory domains relevant to the task. Follow this company's existing startup and staging rules. Search decision history for the specific question when needed; do not load the entire history by default. If a needed file is unavailable, say which file and what you cannot establish without it.
Before changing tasks, ending the session or approaching a context limit, save unfinished drafts and a short restart note: the current objective, decisions made, files changed, unresolved checks and the exact next action. Link to evidence rather than copying long logs. Keep the current summary current; preserve history in the company's existing archive. Never claim work was saved without checking the saved file.
What ships with it
12 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- agent-specs/agent-planner.md 12 KB
- agent-specs/delivery-manager.md 14 KB
- agent-specs/mission-shaper.md 29 KB
- mission-templates/blocked.md 821 B
- mission-templates/done.md 419 B
- mission-templates/in-progress.md 406 B
- mission-templates/mission-brief.md 4.0 KB
- mission-templates/quality_gates.md 840 B
- mission-templates/todo.md 543 B
- README.md 4.6 KB
- references/agent_spec_examples.md 9.8 KB
- skills/agent-spec-builder/AGENT_SPEC_BUILDER.md 9.0 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday Changed · +50 lines 3656a199cec5
- 3d ago Changed · +21 lines c7a58af5d7e0
- 1mo ago Changed b84a0d78e0c6
- 1mo ago First seen · 783 lines · 219 tokens per session scan A 29618baa8b1f
agent-os-run is a skill published in the GitHub repository BoSMark/BoS_OS_Start (25 stars, last pushed yesterday), licensed MIT. It adds 219 tokens to every session and 12,646 once invoked, about $0.0009 per session on Opus 5.5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
forbotsake
Marketing skills for Claude Code. From zero marketing knowledge to published content. Run /forbotsake to set up all marketing skills, check installation health, or get routed to the right skill. Use when: "forbotsake", "install forbotsake", "marketing skills", "how should I market this", "help me sell this".
tweakidea
Use when a founder wants to evaluate a startup idea or problem, improve or compare idea evaluations, or mine Hacker News for product opportunities. Runs a 14-dimension weighted scorecard with assumption tracking, generates small/medium/big idea tweaks, diffs runs, browses and analyzes HN threads, and lists, opens, or…
define-done
Generate a branded HTML accountability tracker for the next N days using the "Define Done" ritual. Takes 3 outcomes per day max (binary, shippable, no fluff), applies Walid's prompting principles for Claude Code, and outputs a self-contained HTML file ready to pin in a browser tab. Use when the user says "define…
forbotsake-cron
Autopilot mode for forbotsake. Installs a cron job that auto-posts reviewed content on schedule using Claude Code + Chrome. Content-calendar.md drives the timing. Subcommands: install, status, uninstall, pause, resume, doctor, run-now. Use when: "auto-post", "schedule posts", "autopilot", "cron", "forbotsake-cron"…
prd-os
PRD creation and PRD execution operating system. Use when the founder asks to turn a rough idea into a PRD, run a Codex review on a PRD or issue, decompose an approved PRD into issue specs, or execute an issue with scope enforcement and receipt-based closeout. Not for general product ideation or casual drafting; this…
reddit-writing-style
Use when analyzing a corpus of a user's Reddit posts to extract their writing voice, tone, structural patterns, and vocabulary into a reusable style guide. Invoked during /reddit-setup and re-invokable standalone if the user wants to refresh their style file after writing more posts.