attack-path-analysis
Use when Codex is already in the attack-path-analysis phase of a security scan or the user explicitly asks to trace a security…
Surgical execution guardrails for coding, debugging, review, and refactor tasks
Claude Code
$ npx -y skills add CoWork-OS/CoWork-OS --skill karpathy-guidelines --agent claude-code
Codex
$ npx skills add CoWork-OS/CoWork-OS --skill karpathy-guidelines -a codex -y
Cursor
$ npx skills add CoWork-OS/CoWork-OS --skill karpathy-guidelines -a cursor -y
Gemini CLI
$ npx skills add CoWork-OS/CoWork-OS --skill karpathy-guidelines -a gemini-cli -y
GitHub Copilot
$ npx skills add CoWork-OS/CoWork-OS --skill karpathy-guidelines -a github-copilot -y
OpenCode
$ npx skills add CoWork-OS/CoWork-OS --skill karpathy-guidelines -a opencode -y
Windsurf
$ npx skills add CoWork-OS/CoWork-OS --skill karpathy-guidelines -a windsurf -y
name: karpathy-guidelines description: "Surgical execution guardrails for coding, debugging, review, and refactor tasks" version: "1.0.0" metadata: author: CoWork OS Contributors <info@coworkosapp.com>
Keep execution scoped, simple, and verifiable for coding, debugging, review, refactor, and file-editing tasks.
Use when Codex is already in the attack-path-analysis phase of a security scan or the user explicitly asks to trace a security…
Use when the user asks for a deep, exhaustive, multi-pass, or variance-reducing repository-wide Codex Security scan. Run repeated…
Use when Codex is already in the finding-discovery phase of a security scan or the user explicitly asks to discover candidate…
Use when the user explicitly asks to fix and verify a validated or plausible security finding. Do not use as the primary trigger…
Use when the user asks for a security review of a pull request, commit, branch diff, working-tree patch, or other Git-backed…
Use when the user asks for a repository-wide or scoped-path security scan.
Shape output for a reader with ADHD: lead with the next action, number multi-step work, restate state across turns, suppress…
Set up the owner profile so a personal agent knows who it works for (first-run setup, \"get to know me\"), or distill colleague,…