skills/core/aios-onboard/SKILL.md
7-question intake interview that scaffolds the context/ folder (about-business.md, about-me.md, priorities.md, connections.md) so Claude knows who you are, what you run, and what tools you use.
npx skillsauth add bereniketech/claude_kit aios-onboardInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Before asking anything, check context/ in the project root.
| State | Action |
|---|---|
| context/ missing or all stubs | Run full 7-question interview |
| Some files populated | Ask only for missing sections |
| All files populated | Confirm update intent, then run targeted refresh |
Wait for each answer before proceeding.
Q1 — Identity "Who are you and what does your business or project do? What do you sell and who buys it?"
Q2 — Voice "Paste 2 samples of your own writing verbatim — emails, posts, docs, anything. Don't edit them."
Q3 — Priorities "What are your 2–3 most important goals for the next 90 days?"
Q4 — Seven Buckets For each bucket ask: "Which tool owns this for you?"
| Bucket | What it covers | |---|---| | Revenue | Where you track money in/out | | Customer | CRM, analytics, where customers live | | Calendar | Your schedule and bookings | | Comms | Email, Slack, internal messaging | | Tasks | Project management, to-dos | | Meetings | Transcripts, call notes | | Knowledge | Docs, files, drive, local folders |
Q5 — Pain Points "What tasks do you do most often that feel boring, repetitive, or like they should be automated?"
Q6 — Connections Intent "Which 1–2 tools should I be able to touch first — to pull data, check status, or act on your behalf?"
Q7 — Cadence "If I could do one thing automatically while you're not around, what would it be?"
After all 7 answers, write to context/ in the project root. Never overwrite existing non-stub content without showing the diff first.
context/about-business.md## Offer
[what they sell — one paragraph]
## ICP
[who buys it — one paragraph]
## Revenue Model
[how money is made]
## Traction
[current stage, size, or metrics if mentioned]
context/about-me.md## Role
[their title or function]
## Working Style
[pace, autonomy preference, communication style]
## Voice
[3 extracted patterns from writing samples: sentence length, tone, vocabulary, what they avoid]
## Top Pains
[the repetitive/boring tasks from Q5]
context/priorities.md## This Quarter
[goals from Q3]
## Current Sprint
[most immediate focus]
## Key Milestones
[any dates or targets mentioned]
context/connections.md## Seven-Bucket Map
| Bucket | Tool | Status | Access method |
|---|---|---|---|
| Revenue | [from Q4] | documented-only | — |
| Customer | [from Q4] | documented-only | — |
| Calendar | [from Q4] | documented-only | — |
| Comms | [from Q4] | documented-only | — |
| Tasks | [from Q4] | documented-only | — |
| Meetings | [from Q4] | documented-only | — |
| Knowledge | [from Q4] | documented-only | — |
_Status: `documented-only` · `partial` · `live`_
_Run `/aios-connect <tool>` to wire a live connection._
## Connections Intent
[from Q6]
## Cadence Intent
[from Q7]
Onboard complete.
✓ context/about-business.md
✓ context/about-me.md
✓ context/priorities.md
✓ context/connections.md
Next: /aios-audit to score your Four C's · /aios-connect <tool> to wire your first live connection.
Rule: Never write placeholder text like "[TBD]" — if the user didn't answer a section, leave the header only and list the gap in the completion report.
testing
AUTHORIZED USE ONLY: This skill contains dual-use security techniques. Before proceeding with any bypass or analysis: > 1.
testing
Provide comprehensive techniques for attacking Microsoft Active Directory environments. Covers reconnaissance, credential harvesting, Kerberos attacks, lateral movement, privilege escalation, and domain dominance for red team operations and penetration testing.
development
Detects missing zeroization of sensitive data in source code and identifies zeroization removed by compiler optimizations, with assembly-level analysis, and control-flow verification. Use for auditing C/C++/Rust code handling secrets, keys, passwords, or other sensitive data.
development
Comprehensive guide to auditing web content against WCAG 2.2 guidelines with actionable remediation strategies.