attack-path-analysis
Use when Codex is already in the attack-path-analysis phase of a security scan or the user explicitly asks to trace a security…
Create a workspace-local .cowork/ memory kit (rules, identity, long-term notes, daily logs, heartbeat templates).
Claude Code
$ npx -y skills add CoWork-OS/CoWork-OS --skill memory-kit --agent claude-code
Codex
$ npx skills add CoWork-OS/CoWork-OS --skill memory-kit -a codex -y
Cursor
$ npx skills add CoWork-OS/CoWork-OS --skill memory-kit -a cursor -y
Gemini CLI
$ npx skills add CoWork-OS/CoWork-OS --skill memory-kit -a gemini-cli -y
GitHub Copilot
$ npx skills add CoWork-OS/CoWork-OS --skill memory-kit -a github-copilot -y
OpenCode
$ npx skills add CoWork-OS/CoWork-OS --skill memory-kit -a opencode -y
Windsurf
$ npx skills add CoWork-OS/CoWork-OS --skill memory-kit -a windsurf -y
name: memory-kit description: "Create a workspace-local .cowork/ memory kit (rules, identity, long-term notes, daily logs, heartbeat templates)." version: "1.0.0" metadata: author: CoWork OS Contributors <info@coworkosapp.com>
Create a workspace-local .cowork/ memory kit (rules, identity, long-term notes, daily logs, heartbeat templates).
Use when Codex is already in the attack-path-analysis phase of a security scan or the user explicitly asks to trace a security…
Use when the user asks for a deep, exhaustive, multi-pass, or variance-reducing repository-wide Codex Security scan. Run repeated…
Use when Codex is already in the finding-discovery phase of a security scan or the user explicitly asks to discover candidate…
Use when the user explicitly asks to fix and verify a validated or plausible security finding. Do not use as the primary trigger…
Use when the user asks for a security review of a pull request, commit, branch diff, working-tree patch, or other Git-backed…
Use when the user asks for a repository-wide or scoped-path security scan.
Shape output for a reader with ADHD: lead with the next action, number multi-step work, restate state across turns, suppress…
Set up the owner profile so a personal agent knows who it works for (first-run setup, \"get to know me\"), or distill colleague,…