os-step-by-step

kharmanskyi/open-steps Other

os-step-by-step is a skill in kharmanskyi/open-steps, last changed 30 Sept 2026. It can run shell commands, reach the network and pre-approve tools — read the findings before installing.

From the author

ALWAYS invoke this skill when you need the user to act - run a command, paste a secret, click, approve - and whenever they ask how to do something or say they do not know what to do: "step by step", "walk me through it", "what do I do", "what should I do", "I don't understand what to do", "explain what I need to do", in any language. Picking which task comes next is os-whats-next; this skill is for doing the thing in front of you. First earn the ask: try it yourself, find another route, shrink it to the part only they can do. Then one action per step, commands labelled by what they touch, no jargon. Commands are single lines that prompt for any value - typing hidden for secrets - and confirm in plain words. Afterwards verify their step.

How much a skill can do, not whether it is risky.

Pattern check

Nothing flagged

That isn't proof the skill is harmless.

Commit 4fa744b · 29 Oct 2026

How the check works

Pattern check: nothing flagged

That isn't proof the skill is harmless.

Install

Each tab says whether it installs commit 4fa744b, the one we checked, or the latest version.

OpenCode also looks in .agents/skills/ and ~/.agents/skills/, so use the Any agent steps.

Goose also looks in .agents/skills/ and ~/.agents/skills/, so use the Any agent steps.

Windsurf (Devin Desktop) also looks in .agents/skills/ and ~/.agents/skills/, so use the Any agent steps.

Zed also looks in .agents/skills/ and ~/.agents/skills/, so use the Any agent steps.

Roo Code also looks in .agents/skills/ and ~/.agents/skills/, so use the Any agent steps.

Factory Droid also looks in .agents/skills/ and ~/.agents/skills/, so use the Any agent steps.

Junie also looks in .agents/skills/ and ~/.agents/skills/, so use the Any agent steps.

Amp also looks in .agents/skills/ and ~/.agents/skills/, so use the Any agent steps.

No install command here reaches Kiro. Copy the skill's folder into .kiro/skills/ in your project, or ~/.kiro/skills/ for all your projects. kharmanskyi/open-steps/skills/os-step-by-step (opens in a new tab)

Antigravity also looks in .agents/skills/, so the Any agent steps reach it with This project. For All projects, see where Antigravity looks.

Cline also looks in .claude/skills/, so the Claude Code steps reach it with This project. For All projects, see where Cline looks.

No tab for your agent? Use Any agent for OpenCode, Goose, Windsurf (Devin Desktop), Zed, Roo Code, Factory Droid, Junie and Amp. With This project, Any agent also reaches Antigravity and Claude Code reaches Cline. Kiro needs the folder copied by hand.

Pinned to commit 4fa744b, the one we checked.

From your project's root folder:

tmp="$(mktemp -d)" &&git clone -q --depth 1 --filter=blob:none --no-checkout https://github.com/kharmanskyi/open-steps.git "$tmp" &&git -C "$tmp" fetch -q --depth 1 origin 4fa744ba8ea06ccf128a39853824c46ac391dd00 &&git -C "$tmp" sparse-checkout set -- skills/os-step-by-step &&git -C "$tmp" checkout -q 4fa744ba8ea06ccf128a39853824c46ac391dd00 &&mkdir -p .claude/skills &&mkdir .claude/skills/os-step-by-step &&cp -R "$tmp"/skills/os-step-by-step/. .claude/skills/os-step-by-step/ &&rm -rf "$tmp"

If Claude Code was already running and this created the skills folder, run /reload-skills.

Or install the open-steps plugin it ships in. Installs the latest version, not the one we checked. Installs everything in the plugin, including any hooks, MCP servers and scripts our check doesn't cover.

claude plugin marketplace add kharmanskyi/open-steps --scope project &&claude plugin install open-steps@open-steps --scope project

Claude Code docs

Pinned to commit 4fa744b, the one we checked.

Skills in the Claude apps belong to your account rather than to a project.

Make os-step-by-step.zip, with the skill folder at the top level:

tmp="$(mktemp -d)" &&git clone -q --depth 1 --filter=blob:none --no-checkout https://github.com/kharmanskyi/open-steps.git "$tmp" &&git -C "$tmp" fetch -q --depth 1 origin 4fa744ba8ea06ccf128a39853824c46ac391dd00 &&git -C "$tmp" sparse-checkout set -- skills/os-step-by-step &&git -C "$tmp" checkout -q 4fa744ba8ea06ccf128a39853824c46ac391dd00 &&out="$(mktemp -d)" &&cp -R "$tmp"/skills/os-step-by-step "$out"/os-step-by-step &&(cd "$out" && zip -qr - os-step-by-step) > os-step-by-step.zip &&rm -rf "$tmp" "$out"

In Claude, open Customize > Skills, select +, then + Create skill > Upload a skill, and choose os-step-by-step.zip.

On Free, Pro and Max plans, turn on Code execution and file creation (Create and edit files in newer settings) under Settings > Capabilities.

Claude apps docs

Pinned to commit 4fa744b, the one we checked.

From your project's root folder:

tmp="$(mktemp -d)" &&git clone -q --depth 1 --filter=blob:none --no-checkout https://github.com/kharmanskyi/open-steps.git "$tmp" &&git -C "$tmp" fetch -q --depth 1 origin 4fa744ba8ea06ccf128a39853824c46ac391dd00 &&git -C "$tmp" sparse-checkout set -- skills/os-step-by-step &&git -C "$tmp" checkout -q 4fa744ba8ea06ccf128a39853824c46ac391dd00 &&mkdir -p .agents/skills &&mkdir .agents/skills/os-step-by-step &&cp -R "$tmp"/skills/os-step-by-step/. .agents/skills/os-step-by-step/ &&rm -rf "$tmp"

Codex picks up new skills on its own; restart it if this one does not appear.

Codex docs

Pinned to commit 4fa744b, the one we checked.

From your project's root folder:

tmp="$(mktemp -d)" &&git clone -q --depth 1 --filter=blob:none --no-checkout https://github.com/kharmanskyi/open-steps.git "$tmp" &&git -C "$tmp" fetch -q --depth 1 origin 4fa744ba8ea06ccf128a39853824c46ac391dd00 &&git -C "$tmp" sparse-checkout set -- skills/os-step-by-step &&git -C "$tmp" checkout -q 4fa744ba8ea06ccf128a39853824c46ac391dd00 &&mkdir -p .cursor/skills &&mkdir .cursor/skills/os-step-by-step &&cp -R "$tmp"/skills/os-step-by-step/. .cursor/skills/os-step-by-step/ &&rm -rf "$tmp"

Cursor docs

Pinned to commit 4fa744b, the one we checked.

From your project's root folder:

tmp="$(mktemp -d)" &&git clone -q --depth 1 --filter=blob:none --no-checkout https://github.com/kharmanskyi/open-steps.git "$tmp" &&git -C "$tmp" fetch -q --depth 1 origin 4fa744ba8ea06ccf128a39853824c46ac391dd00 &&git -C "$tmp" sparse-checkout set -- skills/os-step-by-step &&git -C "$tmp" checkout -q 4fa744ba8ea06ccf128a39853824c46ac391dd00 &&mkdir -p .github/skills &&mkdir .github/skills/os-step-by-step &&cp -R "$tmp"/skills/os-step-by-step/. .github/skills/os-step-by-step/ &&rm -rf "$tmp"

In a running Copilot CLI session, run /skills reload.

Or install it with gh skill, which also installs the commit we checked. Needs GitHub CLI 2.90 or later.

gh skill install kharmanskyi/open-steps skills/os-step-by-step/SKILL.md@4fa744ba8ea06ccf128a39853824c46ac391dd00 --agent github-copilot --scope project

Copilot & VS Code docs

Pinned to commit 4fa744b, the one we checked.

From your project's root folder:

tmp="$(mktemp -d)" &&git clone -q --depth 1 --filter=blob:none --no-checkout https://github.com/kharmanskyi/open-steps.git "$tmp" &&git -C "$tmp" fetch -q --depth 1 origin 4fa744ba8ea06ccf128a39853824c46ac391dd00 &&git -C "$tmp" sparse-checkout set -- skills/os-step-by-step &&git -C "$tmp" checkout -q 4fa744ba8ea06ccf128a39853824c46ac391dd00 &&mkdir -p .gemini/skills &&mkdir .gemini/skills/os-step-by-step &&cp -R "$tmp"/skills/os-step-by-step/. .gemini/skills/os-step-by-step/ &&rm -rf "$tmp"

In a running session, run /skills reload.

Or use Gemini CLI’s own installer. Installs the latest version, not the one we checked.

gemini skills install https://github.com/kharmanskyi/open-steps.git --path skills/os-step-by-step --scope workspace

Gemini CLI docs

Pinned to commit 4fa744b, the one we checked.

OpenCode, Goose, Windsurf (Devin Desktop), Zed, Roo Code, Factory Droid, Junie, Amp and Antigravity read .agents/skills in a project.

From your project's root folder:

tmp="$(mktemp -d)" &&git clone -q --depth 1 --filter=blob:none --no-checkout https://github.com/kharmanskyi/open-steps.git "$tmp" &&git -C "$tmp" fetch -q --depth 1 origin 4fa744ba8ea06ccf128a39853824c46ac391dd00 &&git -C "$tmp" sparse-checkout set -- skills/os-step-by-step &&git -C "$tmp" checkout -q 4fa744ba8ea06ccf128a39853824c46ac391dd00 &&mkdir -p .agents/skills &&mkdir .agents/skills/os-step-by-step &&cp -R "$tmp"/skills/os-step-by-step/. .agents/skills/os-step-by-step/ &&rm -rf "$tmp"

Or use the skills CLI from skills.sh. Installs the latest version, not the one we checked. The skills CLI reports installs to skills.sh unless you set DISABLE_TELEMETRY=1.

npx skills@1.7.4 add kharmanskyi/open-steps --skill os-step-by-step

Agent Skills docs

Read SKILL.md first

MIT

Licence

1.3k

Repo stars

Folder last changed

Publisher

Files

Checked

29 Oct 2026

What it can touch

From the files and frontmatter at commit 4fa744b. This is how much a skill can do, not whether it is risky.

Runs shell commands
Its instructions or files give the agent commands to run on your computer.
Reaches the network
It sends or fetches data over the internet, for example with curl, an HTTP library or a package install.
Pre-approves tools
Its allowed-tools field lists tools the agent may use without asking you first, in agents that honour it.

Pattern check

Pattern check: nothing flagged · commit 4fa744b · 29 Oct 2026

We checked every text file in this skill, at commit 4fa744b on 29 Oct 2026, against 45 published patterns such as download-and-run commands, hidden text and credential access. We don't run the skill, we don't read the web pages it points to, and we can't judge everything its instructions might lead an agent to do. In published tests, pattern checks like this one missed most malicious skills. Read the skill before you install it — especially anything it asks you to download or run.

How the check works Report an incorrect finding

Format check

Each agent reads SKILL.md a little differently. We check the file against each one's published rules; we don't run the skill in any agent.

Agent Skills specPasses with warnings
The open format from agentskills.io, held to what the strictest agents enforce, so one folder loads everywhere.
- Warning
  allowed-tools is a list; the spec defines a space-separated string. gh skill publish rejects a list, though Claude Code accepts one. O5
  Fix: Write it on one line: allowed-tools: Read(~/.claude/open-steps/**)
- Note
  The first sentence of the description is 335 characters. Agents shorten long descriptions, so lead with the main job. D8
  Fix: Start with one short sentence that names the job.
- Note
  There is no license field, so readers can't tell whether they may reuse the skill. O2
  Fix: Add license: with an SPDX name such as MIT or Apache-2.0, or the name of a bundled licence file.
- Note
  Reference files that SKILL.md doesn't link: references/01-paste-a-secret.md. Anthropic suggests linking every reference file directly from SKILL.md. B4
  Fix: Link each one from SKILL.md and say when to read it.
Claude CodePasses
Claude Code reads its own extra fields, ignores unknown ones, and still loads a skill whose frontmatter is broken, without its fields.
- Note
  The first sentence of the description is 335 characters. Agents shorten long descriptions, so lead with the main job. D8
  Fix: Start with one short sentence that names the job.
- Note
  Reference files that SKILL.md doesn't link: references/01-paste-a-secret.md. Anthropic suggests linking every reference file directly from SKILL.md. B4
  Fix: Link each one from SKILL.md and say when to read it.
Claude apps & API uploadPasses
Uploading to claude.ai or the Claude API, or packaging with Anthropic's script, accepts only the six spec fields and stops on anything else.
- Note
  The description is 746 characters. The claude.ai Help Center says 200 at most, though Anthropic's API docs and validator allow 1,024. D4
  Fix: If the claude.ai upload refuses it, trim the description to 200 characters.
- Note
  allowed-tools is a list; the spec defines a space-separated string. O5
  Fix: Write it on one line: allowed-tools: Read(~/.claude/open-steps/**)
- Note
  Reference files that SKILL.md doesn't link: references/01-paste-a-secret.md. Anthropic suggests linking every reference file directly from SKILL.md. B4
  Fix: Link each one from SKILL.md and say when to read it.
OpenAI (Codex & API)Passes
Codex finds SKILL.md by its exact name and needs a description; OpenAI's Skills API checks the frontmatter against the spec and caps uploads.
- Note
  The first sentence of the description is 335 characters. Agents shorten long descriptions, so lead with the main job. D8
  Fix: Start with one short sentence that names the job.
- Note
  allowed-tools is a list; the spec defines a space-separated string. O5
  Fix: Write it on one line: allowed-tools: Read(~/.claude/open-steps/**)
VS Code & CopilotPasses
VS Code reads skills one folder below .github/skills, .claude/skills or .agents/skills and falls back to the folder name when the name is missing or differs; GitHub's Copilot docs require the exact name SKILL.md.
- Note
  allowed-tools is a list; the spec defines a space-separated string. O5
  Fix: Write it on one line: allowed-tools: Read(~/.claude/open-steps/**)

SKILL.md

Read SKILL.md on GitHub

Files

2 files

Path	Size
SKILL.md (opens in a new tab)	7.4 KB
references/01-paste-a-secret.md (opens in a new tab)	4 KB

More from kharmanskyi/open-steps

Skill	What it can touch	Pattern check	Licence	Updated
os-ask-simpleALWAYS invoke this skill before asking the user any technical question or offering options, and whenever they ask to be asked in plain words - "ask simple", "ask me simply", "ask me in plain words" - in any language. ALWAYS invoke it too when the user asks for your view on a technical choice: whether it is worth doing, more than the problem needs, or replaceable by something simpler, and which option you would take. Invoke it even when the code makes the answer look obvious: the checks are what make the answer more than a guess. Rewrites the question in plain words and always ends with one marked recommendation. A structural choice first passes six checks, shown as a table: effort now, simpler substitute, extra work later, lock-in, over-engineering, easy to undo. Doing nothing is always weighed. Pre-approves tools Pattern check: Nothing flaggedMITUpdated 5 Oct 2026	Pre-approves tools	Pattern check: Nothing flagged	MIT	5 Oct 2026
os-big-pictureALWAYS invoke this skill when the user asks where the project as a whole stands - "where are we", "what's the big picture", "what have we built", "what is in this project", "map the project", "what does this thing even do", "what is stale", "what can we delete", "update the roadmap" - in any language, and whenever a session report has just been written. It keeps one file, BIG-PICTURE.md: what the product is, every feature with how far it got, which parts nobody has touched, and what is queued next. Age and wiring are measured from git; how far a feature got comes from the reports or says "not checked". Where a tracker is connected it offers to open the queue as tickets, after a yes and never before. Never invents work, never deletes code. Runs shell commands +2 more Pattern check: 1 item to reviewMITUpdated 4 Oct 2026	Runs shell commands Bundles scripts +1 more	Pattern check: 1 item to review	MIT	4 Oct 2026
os-check-workALWAYS invoke this skill when the user asks about work done outside this session - "check work", "check the others", "check other sessions" - or to accept one: "the session is done, check it", "can we merge it" - in any language. You are the receiving party: treat the report as a claim, verify each part against machine state, name every gap between claimed and true. Verified-ready work merges in the same pass. End with what is left, one next step, and any reply another session needs, ready to paste. Runs shell commands +1 more Pattern check: Nothing flaggedMITUpdated 30 Sept 2026	Runs shell commands Pre-approves tools	Pattern check: Nothing flagged	MIT	30 Sept 2026
os-done-or-notALWAYS invoke this skill when work wraps up or the user asks how it went - "done or not", "are we done", "what happened", "report", "what's the status of this ticket" - in any language, and when a Stop hook asks for a session report. Produces a ten-line plain- language report: a lead, a checkmark table, and a verdict - fully done, anything needed from you, new debt, safe to close. Every "yes" names its proof; unverified says "not checked". Saves the report so the next session starts from it instead of re-exploring the repo. Runs shell commands +1 more Pattern check: Nothing flaggedMITUpdated 30 Sept 2026	Runs shell commands Pre-approves tools	Pattern check: Nothing flagged	MIT	30 Sept 2026
os-say-simpleALWAYS invoke this skill when the user asks for simpler or shorter about something said or written - "say it simply", "what does this mean", "I don't understand your answer", "too long", "wait, what?", "bro" - in any language, about any text: your own answer, a report, a review comment, an error. "I don't understand what to DO" is os-step-by-step; this skill restates text. It restates for a reader who does not read code: leads with the point, keeps every number, warning and caveat - no facts added, no bad news dropped. A number returns exactly that many points, most important first. Pre-approves tools Pattern check: Nothing flaggedMITUpdated 30 Sept 2026	Pre-approves tools	Pattern check: Nothing flagged	MIT	30 Sept 2026
os-what-could-go-wrongALWAYS invoke this skill before anything hard to undo gets agreed to - a contract, a purchase, a migration, a launch, a price change, a reorganisation - and whenever the user asks "what could go wrong", "what are we missing", "poke holes in this", or for a premortem or a red team, in any language. Assumes the decision already failed and works backwards to find out why, in a fresh agent that had no hand in making it. Sweeps nine areas and shows what each produced, including the empty ones. Ends on one verdict: go ahead, go but fix these first, try it small first, think again, do not do this. Runs shell commands +3 more Pattern check: 2 items to reviewMITUpdated 30 Sept 2026	Runs shell commands Bundles scripts +2 more	Pattern check: 2 items to review	MIT	30 Sept 2026

All skills in kharmanskyi/open-steps

Other Other skills

Same category, most repo stars first.

Skill	What it can touch	Pattern check	Licence	Updated
diagnosing-superpowersUse when a superpowers session went wrong and your human partner wants to know why — repeated work, ignored plans, stumbles, poor results, a skill that didn't fire, "it took too long", "why is it so expensive", "what is it doing" — or wants to build a bug report for the superpowers maintainers, for the current session or a past one identified by id or path, on any harness. obra/superpowers Runs shell commands +2 more Pattern check: Nothing flaggedMITUpdated 20 Oct 2026	Runs shell commands Reaches the network +1 more	Pattern check: Nothing flagged	MIT	20 Oct 2026
dispatching-parallel-agentsUse when facing 2+ independent tasks that can be worked on without shared state or sequential dependencies obra/superpowers Instructions only Pattern check: Nothing flaggedMITUpdated 23 Jul 2026	Instructions only	Pattern check: Nothing flagged	MIT	23 Jul 2026
benchmark-optimization-loopConvert 'make it faster' requests into a bounded measured optimization loop — baseline first, generate one-hypothesis variants, benchmark each against a correctness gate, and promote the fastest safe variant with reproducible commands. Use when asked to speed something up, try many variants, run recursive optimization, benchmark latency/throughput/cost, or pick the best implementation by repeated measured tests. affaan-m/ECC Instructions only Pattern check: Nothing flaggedMITUpdated 27 Sept 2026	Instructions only	Pattern check: Nothing flagged	MIT	27 Sept 2026
carrier-relationship-managementManage truckload, LTL, and intermodal carrier portfolios: sourcing and FMCSA vetting, freight rate and fuel-surcharge negotiation, RFPs and routing guides, carrier scorecards, allocation, and renewals. Use when onboarding carriers, running freight RFPs, negotiating rates, evaluating carrier performance, reallocating freight, or building freight strategy. affaan-m/ECC Names web addresses Pattern check: Nothing flaggedApache 2.0Updated 1 Oct 2026	Names web addresses	Pattern check: Nothing flagged	Apache 2.0	1 Oct 2026
ponytail-debtList every `shortcut:` comment (and older `ponytail:` ones) as a debt ledger. One-shot report, changes nothing. Use for "ponytail debt", "what did ponytail defer", "list the shortcuts", /ponytail-debt. DietrichGebert/ponytail Instructions only Pattern check: Nothing flaggedMITUpdated 14 Oct 2026	Instructions only	Pattern check: Nothing flagged	MIT	14 Oct 2026
ponytail-gainShow ponytail's measured savings (code, cost, speed) from the benchmark. One-shot display. Use for /ponytail-gain, "what does ponytail save", "ponytail impact". DietrichGebert/ponytail Instructions only Pattern check: Nothing flaggedMITUpdated 14 Oct 2026	Instructions only	Pattern check: Nothing flagged	MIT	14 Oct 2026

At a glance

What it can touch

Pattern check

Install

Claude Code

Claude apps

Codex

Cursor

Copilot & VS Code

Gemini CLI

Any agent

What it can touch

Pattern check

Format check

SKILL.md

Files

More from kharmanskyi/open-steps

Other Other skills