skills/_studio/generate-claude-md/SKILL.md
Full project bootstrap — 6 mandatory phases executed in strict order. Phase 0 detects prior run. Phase 1 gathers context. Phase 2 scaffolds git + ignore files + folders. Phase 3 writes fixed CLAUDE.md stub (10 lines only — no analysis, no stack) + project-config.md. Phase 4 validates. Phase 5 selects kit content. Phase 6 copies kit into .kit/ then reads and executes the planning skill in-context. DONE only when .spec/tasks/task-001.md exists. Writing CLAUDE.md is Phase 3 — never Phase 1.
npx skillsauth add bereniketech/claude_kit project-bootstrapInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
Do not execute this skill inline. Spawn it as an Agent.
When you read this file, your only job is to call the Agent tool with the full content of this skill as the prompt, plus the user's project description. Everything below (Phases 0–6) runs inside that agent. Do not write any files yourself. Do not read idea.md yourself. Do not generate a CLAUDE.md yourself. Spawn the agent and stop.
Agent(
description: "Project bootstrap — full 6-phase scaffold + planning",
prompt: "<paste full skill content here, then append:>
PROJECT_ROOT: <absolute path to project folder>
KIT_PATH: C:/Users/Hp/Desktop/Experiment/claude_kit
User description: <what the user said they are building>
Existing files: idea.md exists at PROJECT_ROOT (read it in Phase 1)"
)
If you are running as the spawned agent, continue below. Execute all phases in order without stopping.
HARD STOP — read before doing anything else. Your first action is NOT to write a file. Your first action is Phase 0 — detect prior run state. Writing
CLAUDE.md— at root OR at.claude/CLAUDE.md— is Phase 3, not Phase 1. Do not callWriteuntil Phase 2 infrastructure is complete.
You are NOT done until ALL of these exist on disk:
| # | Path | Notes |
|---|---|---|
| 1 | PROJECT_ROOT/.git/ | git repo |
| 2 | PROJECT_ROOT/.gitignore | |
| 3 | PROJECT_ROOT/.claude/.claudeignore | must include .kit/ and .spec/ |
| 4 | PROJECT_ROOT/.env.example | |
| 5 | PROJECT_ROOT/.claude/CLAUDE.md | exactly the fixed stub — no analysis, no stack, no skills |
| 6 | PROJECT_ROOT/.claude/project-config.md | all 5 sections populated: Skills, Agents, Commands, Rules, Stack |
| 6a | PROJECT_ROOT/.claude/.gitignore | allows only CLAUDE.md, project-config.md, .gitignore |
| 7 | PROJECT_ROOT/.kit/ | contains board-selected skills, agents, commands, rules + full hooks/ + contexts/ |
| 7a | PROJECT_ROOT/.kit/.gitignore | allows only README.md, .gitignore — kit content never committed |
| 8 | PROJECT_ROOT/.spec/ | planning artifacts |
| 9 | PROJECT_ROOT/.spec/tasks/task-001.md | has its own ## Skills, ## Agents, ## Commands sections |
At Phase 6e, walk this list. If anything is missing, fix it before reporting done.
Rule 1 — Never stop at Phase 3. Writing CLAUDE.md does not end the skill. Continue to Phase 4, 5, 6.
Rule 2 — CLAUDE.md is the fixed stub, always. Never put architecture, tech stack, pipeline descriptions, or skill lists in CLAUDE.md. If a CLAUDE.md exists with that content, overwrite it with the stub. Stack and architecture go in .spec/design.md. Skills go in task files.
Rule 3 — CLAUDE.md has no ## Skills section. Ever. Skills are per-task. Each .spec/tasks/*.md file declares its own.
Check PROJECT_ROOT and classify:
| Observed | Action |
|---|---|
| No .claude/ folder | Start at Phase 1 |
| CLAUDE.md at project root with analysis content | Delete it. Write correct stub at .claude/CLAUDE.md in Phase 3 |
| .claude/CLAUDE.md has ## Stack, ## Architecture, or ## Skills | Overwrite with fixed stub in Phase 3 |
| .claude/project-config.md populated + .kit/ populated + .spec/tasks/ exists | Jump to Phase 6e (verify only) |
| Partial state (some files exist, tasks missing) | Resume from first incomplete phase |
State the classification in one sentence. Then continue — never stop here.
If idea.md, README.md, or source files exist, read them — do not ask the user what they're building.
If nothing exists, ask once: "What are you building?"
.claude/skills/*/SKILL.md → this is the kit itself. Ask for the project path.Ask if not already known: "Absolute path to claude_kit? (default: C:/Users/Hp/Desktop/Experiment/claude_kit)" — store as KIT_PATH. Use forward slashes. Do not ask again in Phase 3b.
NEXT: Phase 2.
If .git/ missing: git init && git branch -M main
# Environment & secrets
.env
.env.*
!.env.example
# Intermediates
.tmp/
# OS
.DS_Store
Thumbs.db
# IDE
.vscode/
.idea/
*.swp
*.swo
# Logs
*.log
Add stack-specific entries (Node: node_modules/ dist/ build/ · Python: __pycache__/ .venv/ *.pyc dist/ *.egg-info/ · Rust: target/ · Java/Kotlin: target/ build/ .gradle/ · Go: bin/ vendor/)
.claude/.claudeignore.kit/
.spec/
node_modules/
__pycache__/
.venv/
target/
dist/
build/
.env
.env.*
.kit/ is mandatory — kit files must not auto-load into context.
Stub with known env vars from the project brief. If none known:
# Add project environment variables here as they are needed.
# Never commit real secrets to this file.
.claude/.gitignore*
!CLAUDE.md
!.gitignore
!.claudeignore
!project-config.md
Keeps .claude/ lean — only Claude config files are committed. No generated files, no sessions, no temp state.
.kit/.gitignore*
!README.md
!.gitignore
.kit/ is a local cache populated from claude_kit. Never committed. Consumers re-populate on clone via project-config.md.
mkdir "PROJECT_ROOT/.claude" "PROJECT_ROOT/.spec" "PROJECT_ROOT/.kit" "PROJECT_ROOT/context"
mkdir "PROJECT_ROOT/.kit/skills" "PROJECT_ROOT/.kit/agents" "PROJECT_ROOT/.kit/commands"
mkdir "PROJECT_ROOT/.kit/rules" "PROJECT_ROOT/.kit/contexts" "PROJECT_ROOT/.kit/hooks"
Never create .claude/skills/ — skills live in .kit/skills/.
NEXT: Phase 3.
Write PROJECT_ROOT/.claude/CLAUDE.md with EXACTLY this. Replace only [Project Name]. Add nothing else.
# [Project Name]
## Start Here
1. Read the current task file listed under `## Active Task` below.
2. The task file lists the skills, agents, commands, and rules it needs — load only those.
3. Implement. Run `/task-handoff` when done.
## Active Task
Tasks: `.spec/tasks/` · Current: `.spec/tasks/task-001.md`
## Routing
Need help outside the current task? `@company-coo` — entry point for board routing.
Kit content: `.kit/` (agents · commands · hooks · contexts · rules · skills).
## Bug Log
`bug-log.md` — date · what broke · root cause · fix · files.
## Context
Business context: `context/` — run `/aios-onboard` to populate · `/aios-audit` to score Four C's.
If PROJECT_ROOT/CLAUDE.md (root level) exists, delete it after writing the correct one at .claude/CLAUDE.md.
Write 4 stub files to PROJECT_ROOT/context/. These are filled by running /aios-onboard in the first session.
context/about-business.md
## Offer
## ICP
## Revenue Model
## Traction
_Run /aios-onboard to fill this in._
context/about-me.md
## Role
## Working Style
## Voice
## Top Pains
_Run /aios-onboard to fill this in._
context/priorities.md
## This Quarter
## Current Sprint
## Key Milestones
_Run /aios-onboard to fill this in._
context/connections.md
## Seven-Bucket Map
| Bucket | Tool | Status | Access method |
|---|---|---|---|
| Revenue | — | — | — |
| Customer | — | — | — |
| Calendar | — | — | — |
| Comms | — | — | — |
| Tasks | — | — | — |
| Meetings | — | — | — |
| Knowledge | — | — | — |
_Run /aios-onboard to fill this in. Run /aios-connect <tool> to wire a live connection._
Use KIT_PATH confirmed in Phase 1. Do not ask again.
Write PROJECT_ROOT/.claude/project-config.md:
# Project Configuration
## Skill Library
Path: KIT_PATH
## Selected Skills
_(populated in Phase 5)_
## Selected Agents
_(populated in Phase 5)_
## Selected Commands
_(populated in Phase 5)_
## Rules Active
_(populated in Phase 5)_
## Stack
_(populated in Phase 6)_
NEXT: Phase 4.
Check every path in the Completion Contract rows 1–6. Create any missing item now. If git init fails, report and stop. Otherwise continue.
Re-read .claude/CLAUDE.md — if it has any content beyond the fixed stub, rewrite it now.
NEXT: Phase 5 — do not stop here.
Based on the project brief from Phase 1, select the items to install. Use the routing table and selection rules below. Do not delegate this to @company-coo or route-agents — those are downstream consumers of a bootstrapped project, not inputs to bootstrapping.
| Project type | Lead company | Planning skill path |
|---|---|---|
| Software, product, AI, API, infra, data, security, OS, web app, CLI, pipeline | software-company | KIT_PATH/skills/planning/planning-specification-architecture-software/SKILL.md |
| SEO, ads, growth, brand, email campaigns | marketing-company | KIT_PATH/skills/planning/planning-specification-architecture-marketing/SKILL.md |
| Blog, video, podcast, newsletter, social, content, docs | media-company | KIT_PATH/skills/planning/planning-specification-architecture-media/SKILL.md |
| Personal OS, AIOS, second brain, executive assistant, personal productivity system | software-company | (none — use aios-onboard as Phase 6d instead of the planning skill) |
When the AIOS project type is detected: Phase 5b skips the "pick 3–8 additional skills" step. Phase 6d runs aios-onboard in-context instead of the standard planning skill. The output is the populated context/ folder. .spec/tasks/ is still created but task-001.md contains only a pointer to run /aios-onboard first.
Record LEAD_COMPANY and the exact planning skill path for use in Phase 6d.
Always include (every project):
KIT_PATH/skills/core/karpathy-principles/SKILL.mdKIT_PATH/skills/core/self-checking-workflow/SKILL.md — embeds build+verify loops and the 95% confidence gate into every task planKIT_PATH/skills/core/iterative-refinement/SKILL.md — prevents accepting mediocre outputs; drives quality improvements back into skillsKIT_PATH/skills/core/aios-onboard/SKILL.md — 7-question intake that populates context/KIT_PATH/skills/core/aios-audit/SKILL.md — Four C's scorecardKIT_PATH/skills/core/aios-level-up/SKILL.md — iterative AIOS improvement loopKIT_PATH/skills/core/aios-cadence/SKILL.md — scaffolds scheduled agentsKIT_PATH/skills/core/aios-connect/SKILL.md — wires live tool connectionsKIT_PATH/skills/ai-platform/api-vs-mcp-decision/SKILL.md — API vs MCP decision rules (needed by aios-connect and any multi-service project)Include when applicable:
KIT_PATH/skills/core/claude-md-routing/SKILL.md — for any project where CLAUDE.md may grow beyond 150 linesKIT_PATH/skills/agents-orchestration/model-selection/SKILL.md — for projects using sub-agents or multi-agent orchestrationKIT_PATH/skills/ui-design/design-from-screenshot/SKILL.md — for UI/frontend projects with visual design requirementsPick 3–8 additional skills from KIT_PATH/skills/ that directly match the project's tech stack and workload. Use the category structure from CLAUDE.md. Examples for a Python FastAPI + AI project: languages/python-patterns, frameworks-backend/fastapi-patterns, data-science-ml/ai-engineer, testing-quality/tdd-workflow, devops/terminal-cli-devops.
Pick the relevant agents from KIT_PATH/agents/. Always include:
board/company-coo.mdsoftware-company/software-cto.md (or equivalent CEO for lead company)Pick relevant commands from KIT_PATH/commands/. Always include: core/ (task-handoff, wrapup, code-review). Add stack-specific commands (e.g. languages/python-review, testing-quality/tdd).
Always include rules/common/ in full. Add language-specific rule sets if applicable (e.g. rules/python/, rules/golang/).
NEXT: Phase 6.
# For each selected skill:
xcopy /E /I /Y "KIT_PATH\skills\<category>\<skill>" "PROJECT_ROOT\.kit\skills\<category>\<skill>"
# For each selected agent:
copy "KIT_PATH\agents\<company>\<agent>.md" "PROJECT_ROOT\.kit\agents\<company>\"
# For each selected command:
copy "KIT_PATH\commands\<category>\<cmd>.md" "PROJECT_ROOT\.kit\commands\<category>\"
# Selected rules:
xcopy /E /I /Y "KIT_PATH\rules\<ruleset>" "PROJECT_ROOT\.kit\rules\<ruleset>"
# Always — hooks and contexts in full:
xcopy /E /I /Y "KIT_PATH\hooks" "PROJECT_ROOT\.kit\hooks"
xcopy /E /I /Y "KIT_PATH\contexts" "PROJECT_ROOT\.kit\contexts"
# Always — rules/common/ in full:
xcopy /E /I /Y "KIT_PATH\rules\common" "PROJECT_ROOT\.kit\rules\common"
# Always — batch-tasks skill (required for multi-task projects):
xcopy /E /I /Y "KIT_PATH\skills\_studio\batch-tasks" "PROJECT_ROOT\.kit\skills\_studio\batch-tasks"
# Always — AIOS skills:
xcopy /E /I /Y "KIT_PATH\skills\core\aios-onboard" "PROJECT_ROOT\.kit\skills\core\aios-onboard"
xcopy /E /I /Y "KIT_PATH\skills\core\aios-audit" "PROJECT_ROOT\.kit\skills\core\aios-audit"
xcopy /E /I /Y "KIT_PATH\skills\core\aios-level-up" "PROJECT_ROOT\.kit\skills\core\aios-level-up"
xcopy /E /I /Y "KIT_PATH\skills\core\aios-cadence" "PROJECT_ROOT\.kit\skills\core\aios-cadence"
xcopy /E /I /Y "KIT_PATH\skills\core\aios-connect" "PROJECT_ROOT\.kit\skills\core\aios-connect"
xcopy /E /I /Y "KIT_PATH\skills\ai-platform\api-vs-mcp-decision" "PROJECT_ROOT\.kit\skills\ai-platform\api-vs-mcp-decision"
Never modify any file under KIT_PATH. Kit is read-only source.
Fill in all five sections (Selected Skills, Selected Agents, Selected Commands, Rules Active, leave Stack for 6e).
List .kit/ and confirm every selected file exists. If any is missing, re-copy it now.
Read the planning skill file for the lead company (from Phase 5a) and execute it in-context. Do not delegate to a sub-agent. Do not use the Skill tool. Read the file and run it as if its instructions were written here.
| Lead company | File to read |
|---|---|
| software-company | KIT_PATH/skills/planning/planning-specification-architecture-software/SKILL.md |
| marketing-company | KIT_PATH/skills/planning/planning-specification-architecture-marketing/SKILL.md |
| media-company | KIT_PATH/skills/planning/planning-specification-architecture-media/SKILL.md |
Pass into the planning skill execution:
PROJECT_ROOTidea.md if it exists (treat as prior input — revision run, not blank slate)## Skills, ## Agents, ## Commands sections at the top using .kit/... pathsTask file format the planning skill must emit:
# Task NNN: <title>
## Skills
- .kit/skills/<category>/<skill>/SKILL.md
## Agents
- @<agent-name>
## Commands
- /<command>
## Acceptance Criteria
...
## Steps
...
The planning skill runs gated phases (brief → design → tasks) with user approval at each gate. Artifacts land in .spec/.
After the planning skill returns:
## Stack in project-config.md with the stack from the design doc..spec/tasks/*.md file: confirm it has ## Skills, ## Agents, ## Commands at the top with .kit/... paths. If any task references a .kit/ item not yet copied, copy it now and add to project-config.md.Bootstrap complete. Lead: [LEAD_COMPANY].
Kit: N skills, M agents, K commands installed in .kit/.
Planning: .spec/tasks/task-001.md … task-NNN.md written. Open task-001.md to start.
This is the end of the skill.
If project-config.md already exists and is populated:
KIT_PATH from it — do not ask again..claude/CLAUDE.md is still the fixed stub. Rewrite if it has drifted..spec/ artifacts..spec/ as prior input..kit/ items missing on disk.KIT_PATH.KIT_PATH/agents/, /commands/, /skills/, /rules/ in their entirety. Only selected items. Exception: hooks/, contexts/, rules/common/ copy in full.@ imports in any generated file. All references are .kit/... paths from project root..claude/skills/ — skills live in .kit/skills/..spec/design.md.testing
AUTHORIZED USE ONLY: This skill contains dual-use security techniques. Before proceeding with any bypass or analysis: > 1.
development
Detects missing zeroization of sensitive data in source code and identifies zeroization removed by compiler optimizations, with assembly-level analysis, and control-flow verification. Use for auditing C/C++/Rust code handling secrets, keys, passwords, or other sensitive data.
development
Comprehensive guide to auditing web content against WCAG 2.2 guidelines with actionable remediation strategies.
development
Expert in threat modeling methodologies, security architecture review, and risk assessment. Masters STRIDE, PASTA, attack trees, and security requirement extraction. Use PROACTIVELY for security architecture reviews, threat identification, or building secure-by-design systems.